{ "Event": { "published": true, "date": "2026-02-28", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-28", "timestamp": 1772324126, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "ad7ca67b-7aa9-4208-978a-428b2b0bb8ad", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772238556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238556, "uuid": "9862471d-b872-4bae-9378-f5bdb23f080e", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238556, "uuid": "ab987580-a8d6-4716-b6c8-0a4bde80ca72", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772238556, "uuid": "e40a7baf-1ea6-4e13-8ba4-2ec7328e3755", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772238556, "uuid": "f357d880-03e9-481f-b5e6-14f667420b0a", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772238556, "uuid": "abb054f6-df05-47b7-89d5-727ce299c0ac", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf7599c1-143d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772239086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772239086, "uuid": "4ef09e56-7f70-4ab1-a069-0ada073ef8aa", "comment": "Malware payload", "value": "be803c207dcc47b101f09f19ae8a73fe", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772239086, "uuid": "5cfb2eda-036b-4494-b23e-4ea6e320c999", "comment": "Malware payload", "value": "5578930b4bfca163b6d82f37447ed63964f62ea354fed80878aedbae8ffdcd9f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772239086, "uuid": "63d36878-3519-4094-aee2-674be4827f99", "value": "T10573B51577FC4609F2FF6B34A9B185041BB2B9672A33C75D1982509E1E36BC0DA21F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772239086, "uuid": "ecd0c44c-983c-4c02-b097-0118c8cb4b7a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772239086, "uuid": "b13eca85-2223-4fe4-bdfb-cf8a5649a492", "value": "1536:d+5hkB5KkcyGgoeE2EpmBdCWJVzZO1A5/k4u94QFVR+Gw:dYhS5KkcyG+BBVMuuKQDUL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772239086, "uuid": "cb8672d4-c074-4678-8f19-43ac0b46a24a", "value": 78336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772239086, "uuid": "8d48d635-81db-47b4-8aed-79a67579992e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1772239148, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772239148, "uuid": "48721970-bae1-48b5-85a4-57686735d534", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772239148, "uuid": "731de856-5781-4da3-8853-21b963606a23", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772239148, "uuid": "e588c840-65b8-40b3-8e9b-9de9e1e2d368", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772239148, "uuid": "e31fd40c-9636-4c82-a535-9d99ebc9f579", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772239148, "uuid": "98ffbfe1-106e-4177-83dd-40cfe2f028a9", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ac957de-1444-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772241816, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772241816, "uuid": "cb9dd582-f2f1-47d9-9467-794d07097249", "comment": "Malware payload (Mirai)", "value": "73ed08768a08932f8a45388fb8ba27ce", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772241816, "uuid": "e7b1918a-5e88-4506-9161-ed40ae3ac73f", "comment": "Malware payload (Mirai)", "value": "4320598f3314b69df9db11e8841f3f20347da1d2e0dfcbfc3f602a657261bbc8", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772241816, "uuid": "98224b44-289f-40e3-b095-29eeae288fb7", "value": "T1F1932B95BC918B12C5D522BAFA2D158D331253E8E3DFB2139E205F743B8A52B0E3BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772241816, "uuid": "3e31af39-925b-4b7a-b213-cb231a62f7c4", "value": "1536:skn4nnYdoLxiynL3vwGmVdCAMFaDBqWowOvUyH7s3WMv5dkvY85KD/QGMaiEyhUS:iyoNioAM4AWowOso63vwvNIyhUaaxqa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772241816, "uuid": "f4e9624c-a067-4d8f-b397-a47b4edb6ae4", "value": 95484, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772241816, "uuid": "6d245b57-d0ef-481d-9fbf-fb8d3776d74b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af03de7e-1444-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772242065, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242065, "uuid": "c8750eb2-c095-4a8c-a984-f52163feb9f6", "comment": "Malware payload (Mirai)", "value": "172a4ac778999cc394bb4b2d9fa750ac", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242065, "uuid": "a8fb8c70-bd74-47f5-a45b-147e276e5af0", "comment": "Malware payload (Mirai)", "value": "d8d6857290df24b7fcf87617f67cb3f13151cbae440aac8189f6d96c8bf74361", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242065, "uuid": "748f2b68-8000-49c9-aadb-6f34a82b4c64", "value": "T17593D451BC82562BC5E423BAF6BE668D336577E5C2CF722BC8614B217B8551F0C63B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242065, "uuid": "a3cdf095-6a02-4c3b-a614-12b7c9a37c0f", "value": "1536:4d+dOKCXt3/NDDkrw24WG1uLatp60EbrT9y3kZcBuA+bYQl:C+dQXt+r6g0OcBudFl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772242065, "uuid": "f810d4e2-5fe5-4f81-b8ee-a6e3d89c664b", "value": 93784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242065, "uuid": "c214ddde-12f2-4cf4-a9f3-91fbafce0706", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16aad771-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772242196, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242196, "uuid": "4ea44cbf-6f67-4763-80fe-f5498fa9ca98", "comment": "Malware payload", "value": "e739dc29e48462e4bee88c21474e51a7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242196, "uuid": "e8b0d914-9bf1-4d10-a15b-92f46f60d220", "comment": "Malware payload", "value": "56ed019e39933567056a99aa4822422af73d09886158c6aca16082388494d2f9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242196, "uuid": "40c37035-58d0-4283-bab5-ea642a059111", "value": "D9F2024633943B73E16255F4E3BDAFCA601E7D64DFEE202BA4413A2270B311D688D81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242196, "uuid": "d8275c0f-98b0-4a54-9f0d-bab1e5dc9f4d", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8g:yYI0ARqw1qAEW67UIWi7M8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772242196, "uuid": "dd974542-c5de-4088-9419-78d748a8d2d9", "value": 34752, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d71d5a8-1445-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772242357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242357, "uuid": "029d8e33-7105-4265-823a-41ae8f5e7285", "comment": "Malware payload (Mirai)", "value": "d1d60977ba78180ad07f844768a1d947", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242357, "uuid": "631212bc-30d9-43e0-9013-d9c5a6543c06", "comment": "Malware payload (Mirai)", "value": "841204db03b755ba28c3c7e2b0c7e68f3e8e66a4139ffbb46520aa5c0cd213bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242357, "uuid": "a2ea7832-806b-447b-9978-e9b20804fd93", "value": "T1A3C39E32D8396DC4C1945434F8B1EE711FA1A6C441A25EBB1AE5C97900C7DA8FA0EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242357, "uuid": "4cc74237-3219-4ba8-84dc-bae175e98a4f", "value": "1536:6aZwsA5XjVZJK0twtfXd/GW25UhMMJNu5xWKLYUIaXwDrucKygHIwS8w+NrFXwwA:6f5Z5Z98XdmVMJaGaX3DymS8TXAwEV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772242357, "uuid": "fc4367eb-5401-4af4-8ced-d2f416b32c65", "value": 120332, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242357, "uuid": "3c20bec7-9742-4362-9c8c-6cd99390353a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db21b0be-1445-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772242568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242568, "uuid": "90e23ef7-2b0e-49b6-bcc4-f568d727e2a0", "comment": "Malware payload", "value": "a7ac90f718647d9f83f8891e81e29e51", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242568, "uuid": "69211f55-7766-47e6-9cbd-0d61a62174a0", "comment": "Malware payload", "value": "964e8dccd09df298c108b27e29a543a37504d8a5a83b60d8343c247a99f10711", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242568, "uuid": "5fcc0854-8a3e-46c3-ab95-06129d43bd12", "value": "T1A1B423CCB6CB88CC55A63134E6A20B4154DBBF33B2DF7391B5B849700DE6A6710297", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242568, "uuid": "9d4140af-1afe-421a-8533-13336664dbee", "value": "12288:XwsK8MG1KnyC/G76u6M0gXar5qduxct2ien3P+beL:lKGcGmuwjpQen3Pwe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772242568, "uuid": "17fdfb46-9ba0-49aa-9055-90479f7b624f", "value": 515391, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242568, "uuid": "ebc20572-69f1-4bde-84b7-4c0b2142df00", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e4d7999-1446-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772242869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242869, "uuid": "5de052b9-528f-4a55-824d-83fb95a16c4c", "comment": "Malware payload", "value": "7cc5afeca698fc884864a8ac5a861348", "object_relation": "md5", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242869, "uuid": "7bae61d1-15f2-43e4-a066-7e9d3077875c", "comment": "Malware payload", "value": "341792182bb1021d5105a84edac4cf240b9140a00484ee51bc79a0d1cbfe7ddd", "object_relation": "sha256", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242869, "uuid": "be41d3f7-f42d-4d44-8612-c9c818d17099", "value": "T1A9C6338DD396AE28E3011F2B9301C5375ACEABE5B90454BEA53F91E22F79C34150E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242869, "uuid": "4db22193-b271-4c75-99ff-45acfee599d9", "value": "196608:I4ILdpiH86pxVPyVJtrwQ3mkh2atnbksnwwd8xaP5wPji8dJ3XNfIQVtmtnVmOpw:SLdwbpxIVoQ3mkQQk0wwy8P5wPji87XH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772242869, "uuid": "408b7d4d-9230-4ad2-83d8-fc81bcbd0e45", "value": 12285341, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242869, "uuid": "5e9caffb-fcd2-41c1-834c-53fe137994f5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cca410bb-1446-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772242973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242973, "uuid": "50474fe8-bc33-4acb-8cf7-ce0ee019282d", "comment": "Malware payload (Mirai)", "value": "64a62a3e471cd7539b7785db1a9e02b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242973, "uuid": "d319b108-d051-49cb-ae1d-debc458da3a0", "comment": "Malware payload (Mirai)", "value": "241d077578b41ac4ce9c48cfb4b950968e487a1f30a4984b3af0cb8d22c79629", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242973, "uuid": "9f8070b9-2684-4a08-a3a5-554f479452d4", "value": "T125E35E9AF402EE7EFC0BD57E44670E19F930A3A13243072A529BFDA3AD311965D16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242973, "uuid": "72f913e0-fb27-4777-bd6c-a0303e8c7112", "value": "3072:leWy5tMmSxA/EYfaAoa5omILfhF9nD7j2NiX:AimSxAsCo40hF9z2NiX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772242973, "uuid": "e49f3683-79f3-435c-a2c8-d16b6f064ddf", "value": 146872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242973, "uuid": "13b2385f-1468-4a70-b3c5-cc774e8cdc5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6187c27-1446-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772243043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772243043, "uuid": "7723999e-e5ae-4432-a5cc-a065cd31f6ae", "comment": "Malware payload (Mirai)", "value": "375db1f7958dcbce2a733539190d2290", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772243043, "uuid": "049dbe67-639e-42a6-a5a1-33e83f7b658a", "comment": "Malware payload (Mirai)", "value": "45bebff8cd1cd076228191fe6fed59d40e9230591fb0957ba262b87063db6a99", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772243043, "uuid": "344b7aae-a87e-4f5a-9ba2-811c5e780651", "value": "T1FAE34B55B8828A22C9D513BEF92D018E331327A8E2DF7213DD105F2577C7A6B0D77A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772243043, "uuid": "f3267496-0994-48b8-b696-227c22dce13d", "value": "3072:MNkU+vbx7obbywHU2ADFut18CaMd7zyE6+GCoekY:o+RobbyuU27tqCagY+GkkY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772243043, "uuid": "6e4b874e-d635-4243-8083-4d751325118b", "value": 145528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772243043, "uuid": "060859be-76b9-4439-844d-22b6b0243de8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8139bfa-1447-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772243449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772243449, "uuid": "f1b2ce97-8cfe-4556-9404-bdf0d20b7601", "comment": "Malware payload", "value": "ac6ae5ec778e3aefae5a3043a4a72c79", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772243449, "uuid": "d846262d-698f-46f0-b110-16a347ef9f5b", "comment": "Malware payload", "value": "efd5af0ab35d454c5a9c90598a28aadeffadcc0c59259c5d537344579ae74a1c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772243449, "uuid": "b7f40cd5-6263-45a7-91ea-22520f5cd952", "value": "T1C424DFB012285F8C7EB9425A9E0539CBA59F3F41363C0AF59E350DE5ADFE34F82652", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772243449, "uuid": "752feda2-1822-4b1e-a756-856c92e4cccf", "value": "6144:lOvaK/kWVq2Yk/XCToENoX9Yl2xG7Jjgk6V:cvaKkWEjjoq2xO1Xi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772243449, "uuid": "14eb12a6-8f91-44b1-986c-8434b20d0a6a", "value": 213073, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772243449, "uuid": "d90c5409-ec29-4348-8d2e-3fa5071e518e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68df03c1-1449-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772244094, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244094, "uuid": "8449cccb-3681-48e1-8175-8535b949209a", "comment": "Malware payload (Mirai)", "value": "40ba4ee867cdcc6bd89948e9e8216286", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244094, "uuid": "352e8298-ada9-4dd0-b450-8edd393ac5fc", "comment": "Malware payload (Mirai)", "value": "ef33007cf9a51c8eb1e84b8baa7b8db021fabcb746c123fe0162a6eae4148186", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244094, "uuid": "d433abb4-7e2a-4a65-8454-c0f4868922d7", "value": "T188B339C1BA43D4F5EC1641306177F73B9A32F0791239DA87E7A89E327C92A419D0A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244094, "uuid": "cdc979e2-073a-4007-8af1-4359c70d7990", "value": "3072:PbKW4dCLFaGFBu3/45g1rcV2wezSr9bMFfln:Pbj4doYGFB0/45gdG9uln", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244094, "uuid": "98a565ad-9b6e-42dd-9d73-e6292a077f72", "value": 107824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244094, "uuid": "64126a1f-0319-4de3-934e-f65ad1282c58", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c7d6825-1449-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772244154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244154, "uuid": "20fdbe47-d596-41ad-8e39-a1bbc3b7bbe5", "comment": "Malware payload (Mirai)", "value": "26b716e24fd07e7ac5f0042b6d5d41f5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244154, "uuid": "abe42231-e777-44ad-b8e1-0340a71bd8df", "comment": "Malware payload (Mirai)", "value": "1237fee0d763b07d5e2fddf707cba759e6e8ae7e6be6594c1f6582d3b2e33961", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244154, "uuid": "f963ef5a-36d1-4466-b4cd-d0e0f17c38ab", "value": "T17AC32912F98584FCC0CAC1340B6FB63AA935F1DD1238B2EB67D4AB123D4EE615E1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244154, "uuid": "915e238f-b60f-43ff-8c94-499300a12ee4", "value": "3072:iY83TgBMfVw+Z7cHIzO8SoMFAIRHp9hApD7bhYcPGkzQ6V8IattGi:in3TgBMfVw+Z7cHIzrSoMFAIRHp9hAJq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244154, "uuid": "42e72d0c-6452-4064-9d0e-3749243e8202", "value": 125440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244154, "uuid": "5fdd7f6b-674a-49d7-93fd-4dd25a9bb78a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eafd0215-1436-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772244289, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244289, "uuid": "baf82c3e-d5b6-4978-a592-9e4d7431896e", "comment": "Malware payload (Mirai)", "value": "4e0b2d6dd7f2533eaf01a1bfb39fc102", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244289, "uuid": "d455e692-4667-43d2-af9a-1c97d67f33b0", "comment": "Malware payload (Mirai)", "value": "d21846945212a64a6e921718a883f68689456108c97d70a09fc6cb058abc5bba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244289, "uuid": "3fae3fcb-567f-4d0b-b105-737c56860065", "value": "T183737DC0A683D9F2DD02467030B7FF329A32E2BB1156EAD7E3D89573AC51502E507A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244289, "uuid": "61e2be48-f4ea-431c-9f6c-53249d0716b6", "value": "1536:B4NGZbUN0cOrmE2H4Ay9Y2NVYuZ5GDbf8EJ60qSLZu:vgN0cOrmE2HyhVYccDrJJb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244289, "uuid": "04df361c-77e4-4344-b7d6-380143ca1f8a", "value": 76500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244289, "uuid": "ef3db9f6-0044-4622-9d50-1fa46ea1fa36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6defe38e-144a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772244532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244532, "uuid": "3166ab80-6d28-43f4-9739-6be3b99e288c", "comment": "Malware payload", "value": "6e327cfc13dc66bd4237acc9feba08b4", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244532, "uuid": "3938f118-bdda-4ee7-8b80-219db698b3ea", "comment": "Malware payload", "value": "3b5e52fde144780a24ddcc5d2e4f5c68aadcc8411883e40000caa04a2ec3433f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244532, "uuid": "bcfdd46d-0bca-4d2a-b8d7-76f75be4e0ef", "value": "T1DE34E0DD186270B80D5DF330E70D980C27C99ED5F8B96AFA91618992C94A8CF1734E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244532, "uuid": "6f1486fb-d348-4b4b-925e-6543d0702695", "value": "3072:8fEY21LNr1LWyU081ssrBQ2WvR7GuCxRof/JWa32iNqcZpRo0vp15V1foZFt+qEG:qEdLrinSsefRf4RUbGiQqntp15V1NH1o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244532, "uuid": "c90eef49-ae7a-48ba-a53c-f81e4fa26e14", "value": 239687, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244532, "uuid": "f3dedbd0-e33e-44ef-80fd-00ad22a7a474", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c534e3c-144a-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772244557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244557, "uuid": "2ad7b136-e35c-4a96-aadd-280bdb55a383", "comment": "Malware payload (Vidar)", "value": "6fdff05a839d16331d09803cf2bad974", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244557, "uuid": "4db0c17b-6b06-42a4-bc14-4382207d65b1", "comment": "Malware payload (Vidar)", "value": "5ac53e312732078514a827b41e1b2cbc6e7161970f9d9ad91f382eede969ac39", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244557, "uuid": "c537a39e-d478-4800-b6ea-7ac0de4bc30f", "value": "T161241237CB1C8765F49A6031D4B2028B5BADDC7385B56A48880EABD7A91C7E440B37", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244557, "uuid": "eb80e3c3-ecab-4586-b511-22fc4eda8a4c", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244557, "uuid": "74d9bbf1-481c-4c6e-bb5f-db9e12bc82fd", "value": "3072:F/TtjgJ4dnyJIheU9acZI/WLhevbfm3vIRJbs13b4m3z+YF+I3h0CPsnEF0t2m:lTxg+5WcBb8bfm3MJbIkm3z+YMI6ClQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244557, "uuid": "6bc52255-2d22-4f91-b75f-cc58dd0f7bfc", "value": 219648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244557, "uuid": "a91a4c24-69e8-4123-9400-44743dfd0176", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9cca085-144a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772244767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244767, "uuid": "b8c4d4b5-d07e-4c64-a51a-30843adcf7ad", "comment": "Malware payload (Mirai)", "value": "97ad32720c79303b793b4ba9589b25c1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244767, "uuid": "f549aff4-1227-4b9c-904c-6bb42e80e2fc", "comment": "Malware payload (Mirai)", "value": "e42f411a1d4bfec2fe318359da936d33061c822cf3d7444203bff14813ff5951", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244767, "uuid": "bf43764f-5550-4a08-ac80-d85c6257b042", "value": "T1ADF31B45F8814B12D5D112BEFE1D128E37231BB8E2DE72129D245F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244767, "uuid": "e59a5622-e3e0-43b1-867c-7b879e57bc87", "value": "3072:ZcLaYBU6hhoTXubj7I4XaO7PGJ8VGYvDYbY:ZuaYBpQTXuv7IyaIXGYvDYbY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244767, "uuid": "84ff0108-4794-4ac5-a144-442bef320f69", "value": 157596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244767, "uuid": "c4fe1377-1154-49e7-bf46-0577226a9423", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23c8255d-144b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772244838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244838, "uuid": "4068c7b4-1a5e-40f6-b1e4-597c04e255ed", "comment": "Malware payload (Mirai)", "value": "0cde8ee5dad8c52a27e1db81cbb4aad3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244838, "uuid": "fae0ab50-93d1-4cd8-a920-d162a37b1a8e", "comment": "Malware payload (Mirai)", "value": "194420d0393124ffc9586eaabcbe8dc643a9fe25b2db67b971fb5c01dc14689b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244838, "uuid": "8bd9a1c9-cfbf-426a-ac4c-d578be0cd377", "value": "T1C8C37B33D82A6F68D159E030B0718F792F53A59182875FBF59A6C2758083D8DF905B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244838, "uuid": "519cf926-2b3c-46da-aebc-bcab63a20e27", "value": "1536:ywxGXM/nvXvjuZ+Zj8uvoxloxtC+7Ks0AEbcpoYIMrTGjZzDkhJvDV4WjHQRr3/2:ywxtfvXDZjNhxtb+s2khJp4WLQR7z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244838, "uuid": "ec9b3968-7860-4205-816c-2667111821c3", "value": 129888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244838, "uuid": "05bb3888-788b-47c1-b85d-bdfcdc9bebe1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "27ec7fa7-144b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772244845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244845, "uuid": "aece7e62-6197-4122-ac80-3f1a0a29c995", "comment": "Malware payload (Mirai)", "value": "871c2f611968dc6995dd96b06309c4c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244845, "uuid": "57ed7cfd-d9ef-4500-838f-be5234defbf5", "comment": "Malware payload (Mirai)", "value": "63533591cd3a43974e01ac57ece3d293f874dd03498435f3bae1311de15f5cc9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244845, "uuid": "cece5bb2-b146-4863-9790-5d1df13dbd20", "value": "T133D33845B9829A27C5E523BBFA6E018D332563E4D2DF71178C215F217BC681F0DB7A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244845, "uuid": "036d2a6d-5435-43a6-900e-59381b349312", "value": "3072:snFif7apx6XS+kUgpjWXlsCM48GWoEqRziQSI:sn8ZS+dQWXlsCFEobOQSI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244845, "uuid": "60c10563-9d5f-454b-b73f-f4bdbb299a4a", "value": 140756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244845, "uuid": "b44cf532-4826-4891-8e07-c7e65cafea8e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33e42c44-144b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772244865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244865, "uuid": "071a3833-0a5f-4661-9233-9a40392c332c", "comment": "Malware payload (Mirai)", "value": "00d372a531b0988e21425c26a055ee0e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244865, "uuid": "1e3a94f8-40ae-48e5-b229-8084bb9f2f13", "comment": "Malware payload (Mirai)", "value": "b775b53d510aa1b5b8ef7db69e7e19c5809024470419cd0b7dd4206518f28344", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244865, "uuid": "9e151dae-59f6-4054-a61f-9d69609260be", "value": "T152A34AC4F743D4F1EC5701B16137FB36AB32E1B5212DE943D3699A33ACA2541DA0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244865, "uuid": "7974e6e8-3475-4213-9c71-b71a8624799d", "value": "3072:hkAFVLsS9EYiWZgsVb5HLHyKXBcu6JL+B:hkAHLs6EL2gsVtOxL+B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244865, "uuid": "3d074d5f-68f5-4ae0-a4fb-11da19413c7c", "value": 103404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244865, "uuid": "eb8cad9c-3730-4bf8-b2c0-151bb0dd338b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4d67892b-144b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772244907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244907, "uuid": "72f3df02-68fa-4c50-aa88-1693fd11e630", "comment": "Malware payload", "value": "7ba03d71b7911f634d4d736f3064f916", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244907, "uuid": "e47b0dba-34a4-4a3c-a577-d4ab77a8242d", "comment": "Malware payload", "value": "1be9fd8a2191668775c206bdd89a53021b7889c5a9df456fc0788d9c9bf9eca4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244907, "uuid": "e5c4c0b6-1a47-4248-a547-0aa8f88f9180", "value": "T10EC4235D7018EB38E507A174F312C0F26BAE662BE0A5C39CD045053B37AFF26689D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244907, "uuid": "3cd95c7c-feb1-4f91-aee2-52f2d708ee27", "value": "12288:FMU+0xq75aS9iYIp6cP/G2Bku87tNvC28c5/VTUPkYyk:R+J71vI/GhYc5/pE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772244907, "uuid": "7f227ae8-08c4-4915-9683-80275021f651", "value": 587570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244907, "uuid": "0ceb4331-8c71-44fe-96ba-a6720caf6696", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c1d6ac4-144c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772245442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245442, "uuid": "6632144d-7e6e-4700-8744-bcd0c2f4c642", "comment": "Malware payload (Mirai)", "value": "68204f99259b519d7727eb25da8a137d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245442, "uuid": "c8fe3bb8-bd5d-4c6d-a49c-46762b7bf606", "comment": "Malware payload (Mirai)", "value": "649bb24ebbfe22488795beb9e0e4a59e1f5294d13895f69df4c8aa4eaa027f38", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245442, "uuid": "2894a983-c230-4be7-9059-df50e2b053c5", "value": "T18FE33A17B5C194FDC4DAC1744FAEF53AAD36B19D1238B16B2BC8AA221E4DE305E1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245442, "uuid": "c1b6b194-11dd-4edd-a652-b03856ebb52f", "value": "3072:8qyoG7VMD+5T27M/eu7AC0EFGGXGxgUFCu2g5FY03lpF:8qyoG7VMD+5T27M/pR44iPpF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772245442, "uuid": "4bec0707-2a21-497f-9496-befc8952bc39", "value": 152424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245442, "uuid": "d6832a67-c8a7-483b-ab8d-bc7c9401f180", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c24c09c-144c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772245442, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245442, "uuid": "f36a2032-c849-440b-ae40-cc74daa1a5b9", "comment": "Malware payload (Mirai)", "value": "e8d6f001b29b139e099b462318ebee42", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245442, "uuid": "cdcf5f6e-b752-4be4-935a-d769cd5b3ce2", "comment": "Malware payload (Mirai)", "value": "36c7b3f0929578f7d3f7753d5c2f9e5e2ed306bdccfc21e5f733519c505874cd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245442, "uuid": "f5fb5cad-1e15-4992-9ae9-c6e468bce071", "value": "T13CE33B06731C0907C1A32EB43A3F67E193FFAAC121E4F644255FAB8A9571E361486E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245442, "uuid": "d92d50bc-2658-4f75-8239-9a08f4088af4", "value": "1536:vUDTFLKa1R9U1IWkPdxfTIrEPXuZGOtu7B74D3vAqjtzzuoeNDqKBNHko9C2:vUtR/WkPdxwE/067x4Eq6Eg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772245442, "uuid": "5e7527e5-63ce-460b-ade1-be62e5442868", "value": 146356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245442, "uuid": "97935fbe-f40f-4bc6-a8a8-bbd03ba3c856", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a802c72f-144c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772245489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245489, "uuid": "b5583ae3-e899-46c0-a481-e15f5e16275d", "comment": "Malware payload (Mirai)", "value": "decbf9ab259031ae61d751bb8aec915c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245489, "uuid": "ce6aece4-1e76-4526-b5b0-897ce741eab7", "comment": "Malware payload (Mirai)", "value": "01fcc722be6e6233cc7da2fb3c0fafc9cc74b86a6cc9d680a2ca17f556d88db8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245489, "uuid": "6bc21439-c382-4dba-bad2-8604ea3bcb1d", "value": "T1A6D34A2275391E2BC4D0A87E22F74361F1F167DA25A8C90E7EB20D4FFF252206547A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245489, "uuid": "6c5c1f87-b576-42ea-bd81-e5a3ca76ca21", "value": "3072:FCldeCsOs9kzj2vV4XcZgqgCBV30Y+FelsjXj/Q:gPeCK9kzivVYHCzlmjz/Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772245489, "uuid": "6a32ccf3-5e5e-4d17-a8b0-96746d0f4c35", "value": 140776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245489, "uuid": "ec4a0e82-6b63-44e3-bf72-d1325dacf0c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d2f85d2-144d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772245820, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245820, "uuid": "ad695963-13b5-47d2-a044-f790c36fa0d6", "comment": "Malware payload", "value": "4af46e253516178e1ab6efd85f7bb7d1", "object_relation": "md5", "Tag": [ { "name": "pw-azuro", "colour": "#8789c7", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245820, "uuid": "1e203e2e-0b3f-4402-a91c-9acb8677075c", "comment": "Malware payload", "value": "a4ed0e6faf68e64ea4b0edd79bce6d693328f5978b661833f181bf734508280f", "object_relation": "sha256", "Tag": [ { "name": "pw-azuro", "colour": "#8789c7", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245820, "uuid": "9533c850-7ac4-4dbb-ae67-0b1e473d1b53", "value": "T15E3733C330E8AF46DC55BAD1F2E54CBF62739ADA4D8D89E9CB65C3A6634363D0208C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245820, "uuid": "d5b58ee4-59c4-4513-aa4b-255f29dad2b8", "value": "393216:rEkW+wY9jD/oD00tehlG/Uv/o8qg28+od0EcAt3Euux1mk0+jpkOiV4T16REol9t:r4+h9j7oY0tiXp1vVYmk0+jp0q16Rn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772245820, "uuid": "a7300e5f-beaa-4f7d-82e0-75f67ee6ea0e", "value": 24055639, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245820, "uuid": "d16fefac-b216-4cdb-90fa-be9ad20f3e51", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1772245884, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245884, "uuid": "f4cb4247-41d2-4369-9f24-059bb89b49fe", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245884, "uuid": "c189aa6f-4662-464f-8fdf-e4da7c0098f7", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245884, "uuid": "146a09e3-0505-4176-9d2e-4b28091106c9", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245884, "uuid": "76e9453d-593e-42d9-a26b-1618964f4b1e", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772245884, "uuid": "c1dd6ef6-761d-42c2-8508-41349bc841d1", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cae3b941-144d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772245977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245977, "uuid": "3f5e6fb0-d1ea-4150-9947-ffe20e27735c", "comment": "Malware payload (Mirai)", "value": "17b22db5ae0210e24636eefa92540f5e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245977, "uuid": "82745c32-6359-402e-b016-e43c6bce37d0", "comment": "Malware payload (Mirai)", "value": "46e65c51c4f06735e84761e8a20cac7b83cfe384fc13700dd1b21d2dbbd92f1c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245977, "uuid": "ef6dbdd4-954d-449b-a5bf-f49ba8f24d20", "value": "T121E31A45B8405B23C6D622BBFB5E42CD372A17E8D3EF720399216F21378695B0D3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245977, "uuid": "6721ec1e-7812-4175-abc4-998c017a3fa3", "value": "1536:e451+mp2YK6lmoTu3mbMAF9vWMf338uApPm4VKpraTWzqsN/OVCOk8q2lEWKr+g+:e451NtMEPOwn8ub4mG2qsN2zsWMBMLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772245977, "uuid": "ab381fd7-f354-4f54-b2a8-27efdaed2d07", "value": 150304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245977, "uuid": "ba19d012-a378-46d5-850f-52b562d381d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e2e1f96-144e-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772246117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246117, "uuid": "dde2f302-c0cb-42d6-9f55-fa69c0206108", "comment": "Malware payload (RemcosRAT)", "value": "8cb7133f023bf9cf62c060cc61c847b1", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246117, "uuid": "3fbe2d5c-60b0-4b76-b48e-4d8ddbf8db94", "comment": "Malware payload (RemcosRAT)", "value": "58b325dd99d79e625832bc2ba64d90ff7ae33d3bded6cb54ebc1e67d46c0f9ab", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246117, "uuid": "c05bed4b-594b-4f4b-9999-1b1c1290a228", "value": "T1F2E184B9D5A5F8D4822B73913CE6EDC31083D123CF779AA4E14D08E11BA9275AFB46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246117, "uuid": "6561912f-988b-425d-bf2b-f763ac711d1b", "value": "192:4wOhMb1lGbQmQ1r2TUnJDVqsknC9xfD+qfRfEINlE:4wOhMplcunJhzSCr7d1N2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772246117, "uuid": "8c47f995-b1e3-4f23-a5c2-abe66aee0a46", "value": 7271, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246117, "uuid": "bf822228-01cb-4465-81de-3a90e22de909", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772246478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246478, "uuid": "1f2f48c5-1c90-43b9-9560-b48db92dfbb5", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246478, "uuid": "cdd54ccf-44fa-4b7f-b866-c2cd6c64cce1", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246478, "uuid": "4807a573-5adc-4674-9ba7-8fa296b387af", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246478, "uuid": "f5820860-a293-4aaf-8bab-76a2aab30711", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772246478, "uuid": "faab5857-96fc-4985-add7-412a82e6edb3", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2eb7baa7-144f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772246574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246574, "uuid": "4dce9d78-6ed8-44c8-94a3-78acc3f9078b", "comment": "Malware payload (Mirai)", "value": "6109a6e64f1995790c8fca892bd6b496", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246574, "uuid": "cd86898b-756d-4cc6-92c2-914674e461ff", "comment": "Malware payload (Mirai)", "value": "06067218b24ae062a99f94c09adcad5c28abc6bead77370ec19c382fd72e88c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246574, "uuid": "857d7a38-7371-4d0e-bc45-6ceb7b2b629e", "value": "T14CD35C0677180E17D5A34AB0263F1BE087FED4D121F4BA89291F9B6A4672D3B1582F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246574, "uuid": "eec56d89-1328-483f-90a2-df935052045b", "value": "3072:i1kzeSFZhMHJqA+Kr5UbeU73HegqM89VkDA:7PFY+cqbeU73+gqM8XkDA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772246574, "uuid": "93466f46-8b46-4ff4-9a88-386fe3008b03", "value": 134320, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246574, "uuid": "02661cf9-e6cd-40e2-8279-67be652420d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1934a4c0-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772246719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246719, "uuid": "b838018b-82a5-48fe-982f-adc52749b1b5", "comment": "Malware payload", "value": "1ff5a92a793b1503e1399bf2434ac5c8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246719, "uuid": "5647a6af-499a-41be-b687-906885fb4cc8", "comment": "Malware payload", "value": "22eb75dfc037517fc0f62570c77379a708a8769fe654bb7c58177ecb17f3c2ee", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246719, "uuid": "3f8788ee-62af-4f69-8494-28402b5e8898", "value": "2213028237A53F72D52188F4D7BCEFCA614A7D94AFA9181BAC123698747135C28C981F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246719, "uuid": "abb201fb-9a7e-494e-b89e-8958aa95baa4", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsD9:yYI0ARqw1qAEW67UIWi7M8gmf9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772246719, "uuid": "3ba16e46-7a72-453c-aa40-6fb60af1dab8", "value": 44888, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a2543165-144f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772246768, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246768, "uuid": "030ebbc7-5c41-4ea7-b4e0-98dde0995b5d", "comment": "Malware payload (Mirai)", "value": "49f0fb031a85b39a5051d75d93218058", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246768, "uuid": "a35fa6a7-3b6c-43f5-bfac-5853599d5e78", "comment": "Malware payload (Mirai)", "value": "78811df1a6d1a67d62025d1449586189c32b5d83109d6040e9a0b38fe0e8c679", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246768, "uuid": "0f3bf43c-3e2d-4e1d-ad19-ab6d801da09d", "value": "T126343B45EA418A13C4D117BAF5AF418A3332A795D3DF730699286FB43B877AF0D636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246768, "uuid": "c2f91c61-3ba9-4e98-b380-e7ead89eccb4", "value": "6144:YIoX0lMTL8+yabqqcVRF9YnJVDMRf9ihM/95AU:Y74kg+yabqqcVv+JaSG/DJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772246768, "uuid": "1ed98bd3-106c-4923-8b4d-1c6c1eb2f1dd", "value": 230952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246768, "uuid": "926b0570-49d3-441f-b713-f067f414aaf4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ec587a7-1450-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772246950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246950, "uuid": "b0625d53-1267-4067-aa44-8804c095584e", "comment": "Malware payload (Vidar)", "value": "c3e6861b181ed8a82f287a77bb22f1ed", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246950, "uuid": "88966473-b0f9-4372-a573-90cd7aa2803d", "comment": "Malware payload (Vidar)", "value": "3c18322820fbc1360a52c9df7c3fbc35012a5d76f38c5d51169609e5cc529f83", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246950, "uuid": "1a1bf921-585d-464f-b4ac-6264f3669cc6", "value": "T1B8D42BBDAC60E376F60CD0BAE286D3538F2139011236AA9319BD97241245473DB677", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246950, "uuid": "51d8a097-a34f-4203-868d-8e39dddbfef2", "value": "32235cfbe2c6b05c5b53af4a209e0eaa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246950, "uuid": "848ee8ce-dfdd-4819-b5a5-8d5e474f367d", "value": "12288:WPyurkSSu5EkPm8b7k4ao/CXjp4JgtU8F6CmSYw2g:WPTrk5u5EkPb7jgjp4JS36UYw2g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772246950, "uuid": "bea135bc-5fea-4686-8406-db73ca66976e", "value": 629760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246950, "uuid": "da900371-2047-4ae7-bee7-968f1ec50118", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ec7e4da-1450-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772247165, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247165, "uuid": "17433e02-bc7c-4d1a-9390-19cfbbeef248", "comment": "Malware payload (Mirai)", "value": "ea16f02089d82fb2a9fc4d246bbf1964", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247165, "uuid": "5c25ccba-5740-4faf-9744-b0950d1cb9b0", "comment": "Malware payload (Mirai)", "value": "a3d71a4c6958bdd70e4a8a85088e40aa652e91f10e0c1ac2aa1187b3a6c5fadc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247165, "uuid": "13721007-cdbb-49ba-9bce-3389a982fd15", "value": "T194F3C50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247165, "uuid": "7744d0b6-9174-43f3-9674-e93a418f9fc2", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwP:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772247165, "uuid": "a7f1700d-0e75-467b-ab11-892f8bf9fa2d", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247165, "uuid": "8fd00dd1-58c1-4f36-b3c4-6185ac092437", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1a1bc29-1450-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772247223, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247223, "uuid": "d08e6a7f-228c-49f1-8483-18556396eb33", "comment": "Malware payload", "value": "342ba2b8e9b0de416ab4de2507cd2fb9", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247223, "uuid": "8aed0d79-3f35-4a54-af8e-51f69d832d37", "comment": "Malware payload", "value": "eacb452529e12d183f9f7a0eebe7b5f6a5170a4c578c49eaf1f3af5101e35eaf", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247223, "uuid": "9593e558-d91c-4801-8f1a-c1350ceddd79", "value": "T1C18309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247223, "uuid": "1ee6d460-d935-4100-a287-91977175af93", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnJWamVN/:XEKltp9txAX/yr2pbJWPVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772247223, "uuid": "c61c7604-aa59-49f4-94ab-7c877f21613c", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247223, "uuid": "ad2894e9-63e7-4248-84f5-89b08dc75d7a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f2bf271b-1450-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772247332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247332, "uuid": "f5a100d6-799c-442d-9992-867a08f2d708", "comment": "Malware payload (Mirai)", "value": "5c4ddb8b3c5c12bed41a1e4f52e66302", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247332, "uuid": "61556c84-3edb-4ecb-9920-8cfe56ab30fc", "comment": "Malware payload (Mirai)", "value": "613c37ea0e7c68d7381ee12b2821affd2e3bad47a8d4babfb61f9443923537d8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247332, "uuid": "68394f0b-16d0-4910-accf-8ccce04b5c20", "value": "T173041905BF110EFBD89BCC3B45F9270529CC581A62EA6B36B934C858B54B25F1AE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247332, "uuid": "31728587-f927-4c44-80ed-b9a1907dc429", "value": "3072:t60NrtUpT/5dltGgXGGP9M4S8lrXwU2woriErou0fCtZ1SD39rsJz30s9fx49SY5:t3nEr5dfHPq7UTo2Ecw3K9X0161", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772247332, "uuid": "70d3f892-c119-4c63-9709-e5a8d5bf7550", "value": 179916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247332, "uuid": "e4d685de-6904-4eed-abe0-34d76242ef8a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772248876, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772248876, "uuid": "00608d31-2f55-4191-b524-996a6aa30b46", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772248876, "uuid": "01e4bb54-21f8-47e6-be32-59d703062901", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772248876, "uuid": "4dc1be9c-9df6-4189-a43f-e2dd29c93dba", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772248876, "uuid": "a9142426-4772-44c5-a6f8-ef3cc51a4fa4", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772248876, "uuid": "873bb773-f2b6-432a-b84a-cda0ad0f4c6c", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1772250732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250732, "uuid": "5fc23bc8-1821-4263-9f8f-c8b568db774c", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250732, "uuid": "8b48837b-16a6-4dfe-a428-5fd915d8cccc", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772250732, "uuid": "b684103c-ebcf-45c8-8210-4eaa8b71ee12", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772250732, "uuid": "d4b598e7-2001-4872-a6b2-1c49672389b9", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772250732, "uuid": "02cc0a2e-28ef-41e5-9cbb-102190f6f59b", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7c6fc98-145d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772252844, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772252844, "uuid": "00585836-e6aa-4625-aa2f-6e8c57c96027", "comment": "Malware payload", "value": "03e24a87025eb30f746bcb54da8a9bfa", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772252844, "uuid": "7a1829df-186a-4b81-a480-cdcbe275bf80", "comment": "Malware payload", "value": "24de9757d7950e0059a386856a7e549a4886343173011478fcd05e639ba6a6e1", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772252844, "uuid": "5a9310bb-ded1-4ae0-9020-ebb627399f98", "value": "T1A55833FC897A1A5D945BFF31D973AC06A5F75079D16BF0B2AD0F8812DDB39A1B1202", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772252844, "uuid": "a16dd058-c03e-4120-b08f-e458f0bc382b", "value": "3145728:Y1WE+VkBoD9ZnI7edkvXY6hrhOAouBlaSjhwYoAmS3Ne0pMVktZ:CWrdPIioXxLYuBzjhXoAmINeE4yZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772252844, "uuid": "4ec4bc50-db03-4a26-9ab1-5d0a2b41ba2f", "value": 132632741, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772252844, "uuid": "c88a033c-8249-43a7-884b-387274e98ccc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7916fa80-1474-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772262590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772262590, "uuid": "5cc6cc34-ce2f-4318-8cce-be6b0812d663", "comment": "Malware payload (Mirai)", "value": "657654bb881b119918e418cd68e73ba2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772262590, "uuid": "ada97e43-f70e-405c-ad4d-47332a26e0a8", "comment": "Malware payload (Mirai)", "value": "6bba94ed6f459d480ddb5ccf6862465dbdc4a35c7ea31bf66b3e6074d06fbbb0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772262590, "uuid": "0084733f-bd7c-4508-8a1f-52d9cf68fad4", "value": "T1F6142A46EA404B13C4D627B9F6DF42463333979493E773069528AFB43F8679E4F12A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772262590, "uuid": "1fb1d872-0823-46d5-a08d-5b25bad30e0a", "value": "6144:2R1a6BqbNragXnDWS24eLlBOIA0rM/RuRw:o1arbNraInDWS2DFA0A/cW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772262590, "uuid": "d96a8615-0f41-4dd6-8180-8a509abcddde", "value": 198026, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772262590, "uuid": "b0952a33-21be-4ea2-a7ce-6eea4e36f003", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fe4bb72b-1474-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772262814, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772262814, "uuid": "dcd65d7a-532d-4356-a359-45b6d3e81f30", "comment": "Malware payload (Mirai)", "value": "b63fcb283b08d419a0fd941281fc54e2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772262814, "uuid": "115131fb-ccc1-4912-9c3d-2d9a4cd1663b", "comment": "Malware payload (Mirai)", "value": "0983ff32b6bd942f968c8c8a44aedccd86f7334cefebbbf41c9dfaf44c83c2c4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772262814, "uuid": "152b46a1-5b3e-496e-a31b-829b4873025a", "value": "T17BE31A45F8505B23C6D612BBFB5E428D372A17E8D3EF720399216F25378686B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772262814, "uuid": "1fead3db-d23f-4698-b6ae-eaee43823340", "value": "3072:3ITEs7uRGpUlWnF46r/b9l5n5CYp7G7Wz:3ITyRQ66F46Tb9Hn5zNVz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772262814, "uuid": "f021033d-ff94-46ff-bf8f-7887ec32b249", "value": 146208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772262814, "uuid": "70d78bc2-3d43-4a31-ac30-9dd49b898516", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d7a445fb-1475-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772263178, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263178, "uuid": "cf71598d-831a-43df-b759-43d109543027", "comment": "Malware payload (ConnectWise)", "value": "a16d5492a98b8db4d33ccdee87c1f720", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263178, "uuid": "74691bce-655e-49bb-9060-8665a561076e", "comment": "Malware payload (ConnectWise)", "value": "9ba7d9e22d29cf36dddfa49de3af500d4fcfd89d294f86cc8d5523055375ee42", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263178, "uuid": "257d602e-28a4-4d8d-be53-8e67603e3b5b", "value": "T169D61201B3E945B5D4BB0A38D83996656A35BC009715CABF13D4BD6D2E32BC08E363", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263178, "uuid": "487e923c-1e10-4dfd-95f1-7cbe03f7b0a0", "value": "9771ee6344923fa220489ab01239bdfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263178, "uuid": "3a8ee829-5811-463d-acce-59ff214e1eaf", "value": "196608:y5QfefP+n/dkyMb5wH/no6vDsvn/dkyMb5an/dkyMb59n/dkyMb5G:yqVWwH/o6vQvVWaVW9VWG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772263178, "uuid": "9c333e4d-6eaf-4739-874b-65208193dadd", "value": 12626488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263178, "uuid": "e2cfb869-13fb-40fb-804f-e19f2955fca6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e2caa86-1476-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772263458, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263458, "uuid": "f7d3e884-c5e5-4184-aba3-bb21abcb3ed0", "comment": "Malware payload (Mirai)", "value": "169b61927ed09df52a924bf7261bf4fb", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263458, "uuid": "b4d0b01b-1508-4d6b-bdbd-398455b81957", "comment": "Malware payload (Mirai)", "value": "969ac04fd6f1c44ceb8061883f82fe26faeff196a4e882c8d2f1f097c5d13ade", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263458, "uuid": "0a83eae9-d3d5-4532-ba3b-03f4c036af8d", "value": "T10614E81AAB550FFBDCABDD3706E90B0139CC944722A43B3A7674D528F54B50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263458, "uuid": "5eac0740-5599-42c3-bd2a-6b6ddda43b94", "value": "1536:ZApm3TGAbl4qCHcwO7d0aTswUNt8h7cF8aRzEtZvdue2lU1LgXZAqxjE8XNCIwgR:apm3TRqqlr0Cn25lTXCKNCmhmCYOCA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772263458, "uuid": "d50d7fae-2e6e-4628-b549-79009088e20f", "value": 194464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263458, "uuid": "234dcde8-7cae-4131-bc27-91e9ee776f23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab4245be-1476-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772263533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263533, "uuid": "b51e2c38-4b81-4dc0-8fa7-8d595e4b87b8", "comment": "Malware payload", "value": "c460bbbe9bf38494671ae2078cdd3edb", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263533, "uuid": "95afa9ec-b42a-483b-9a7b-97140221614d", "comment": "Malware payload", "value": "9877f4688d862ebbdd00505511b2424ff1f54646cec20194c16f33c50d6d87a5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263533, "uuid": "dc8e24d2-034c-47d9-82d1-e6dc2cc204f4", "value": "T1C6A52342F8C485F3C4511C331B65A7616A7DBE202F268EDBB3856B1DE9614D0EB31A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263533, "uuid": "52064ace-5ee6-4933-befe-26abb0ac6864", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263533, "uuid": "fabc2bb9-7716-4222-8455-b3d18387b32f", "value": "49152:ABRMTpc8iYM5pF9UBB6jdLXsuuX4/cqZIiQx6lSONx:auTFM5pXUBB6BLXTuoEXx6lSONx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772263533, "uuid": "575530a6-5679-45ff-b6e9-70f2eb99836e", "value": 2110512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263533, "uuid": "6e9ba0d5-1101-454a-a8dd-805d6eaa0f66", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e78bc8d0-1476-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772263634, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263634, "uuid": "5b0f42c7-bf90-4890-8d91-2e54516338e3", "comment": "Malware payload", "value": "389c2a423a6b253282b39c41d07f6503", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263634, "uuid": "3205f2f6-3028-4d21-9db3-74060654e6bc", "comment": "Malware payload", "value": "de70fe78f60cbe3047fe24d5768ed5bab3336de6b4da208ccd114dacb9624121", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263634, "uuid": "a79ddea2-fdce-4995-b77b-d759bde6d1ff", "value": "T14534E02DE39C4A2925B1BFD15CF0EA370F588A55AB874706C329C5CFBEA80C6FD464", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263634, "uuid": "6aeadb0b-0735-463c-8c32-df32ac15cd75", "value": "6144:OMYNPCV5dE2owEh1rMrV4kz1snndiEriYdcWqfoILokkq9L1j/r:OMsPCVI2oLxqzCNKfRLoHq1lD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772263634, "uuid": "8aa80ac2-a087-41ae-a726-8b09f5ad195a", "value": 247884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263634, "uuid": "a0a37a15-76d7-4c8a-829d-2f61d6bfb006", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb94a502-1416-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772263854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263854, "uuid": "628c72e4-6ec2-445a-89ea-5e61d0493bd5", "comment": "Malware payload (Vidar)", "value": "706caa75b592935c6a9daca877b7b1ee", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263854, "uuid": "4d9fd964-7c96-4175-ae90-2356f6923c4c", "comment": "Malware payload (Vidar)", "value": "0b672807d7526c571d3809112ca0d04e3df926b5414d00cb8a6d73f59a172e9b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263854, "uuid": "89fa7780-5e6e-4f3e-a105-ee40dae030f8", "value": "T1DE2423F201455A5BE71288B01DA9D70C74A3EA3F92B12001C66777551E0F3E9FF7A1", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263854, "uuid": "a0539171-226a-429c-991b-074e9eb788a3", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263854, "uuid": "dc274b1b-e2d9-42f0-8828-314018050198", "value": "6144:nMUNt7a3yqgdX/w7drhQZXveORMOqHa02FDz4+7cj:nMUNAgdPw7drSF3tq63G+g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772263854, "uuid": "b9f38a6f-4993-4c7d-87fc-20472266057e", "value": 219648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263854, "uuid": "44728654-2949-4edd-96a9-e2dfbbb27516", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2134341-1477-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772263974, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263974, "uuid": "7cf95eee-21fc-4235-9271-61889c384c19", "comment": "Malware payload (ConnectWise)", "value": "a031d70f1cc58076f984ecd79e7ca065", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263974, "uuid": "e0882baf-8721-4b6b-b838-d76b907d463d", "comment": "Malware payload (ConnectWise)", "value": "c8504bedea7878da02425b7900f307713dc02cd0dd8c3c6954e808b10c5aad34", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263974, "uuid": "ba1c98ba-f90c-4f88-975d-8196996accd9", "value": "T155836C43B5D18475E9720E3118B1D9B4593FBE210E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263974, "uuid": "291ef4be-d3d8-427a-81b4-79df62cbc83b", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263974, "uuid": "07a60f41-748c-41fc-8b24-540ece020171", "value": "1536:5oG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYd7zJs:DenkyfPAwiMq0RqRfbaWZJYYdZs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772263974, "uuid": "835ec7b9-b13d-415d-ad9a-eae3650df7f0", "value": 83224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263974, "uuid": "8de34f20-d402-4822-ae1b-41e3b65a4794", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4e82f69-1477-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772264086, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264086, "uuid": "bddcaec4-711a-4326-9673-44c51dc86ffe", "comment": "Malware payload", "value": "4453ae4f5c869eb43a389e5902680f8c", "object_relation": "md5", "Tag": [ { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264086, "uuid": "3627e02c-d229-40af-b23d-1f3fd0ef7023", "comment": "Malware payload", "value": "6f8bf5ee6eda94f9ff05cc334c13a40cd82a6b220a5d6537dd8a9ed50b096013", "object_relation": "sha256", "Tag": [ { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264086, "uuid": "79085d0a-a9d9-4ed0-942a-1430f6f5a7d7", "value": "T1C728335CB89E2169C23C4A7D17F05EF6AFFE001B984F0ACCED4A6311DD985893BD46", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264086, "uuid": "c4bcab2c-279f-4b0f-93bd-fb16f2da019d", "value": "1572864:v0Y4KGq+57XgkZCLAdSpxU1mlHKPCyB3W50apbii+n9OB0T/gZaSNBBlPSyYds:vf4KG57RZnSDxHm385NgiKYBQgJB9Gs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772264086, "uuid": "af3730ee-88ea-4aad-ba81-559d5ada0143", "value": 102614387, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264086, "uuid": "97efe133-9962-481c-be00-5eabe6611d8d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d81b1cb5-1478-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772264467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264467, "uuid": "e7864e6d-def9-4385-8c81-f53b143cd55b", "comment": "Malware payload", "value": "5128cb421292017fdb6a98e2b0eb1e22", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264467, "uuid": "4181baa1-fb89-4c68-aff4-770f2b35fe70", "comment": "Malware payload", "value": "38b139423b5e77a4e7610924eb49c2cdfbe3c7ad42f6bab42d60bcefcf385cc4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264467, "uuid": "0e6970e6-35d7-48b7-936e-e55fd38083c4", "value": "T123331A48512E7196386D938343A2B420D1F468BEDA572E60E444332AF54B05DBFEFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264467, "uuid": "2488730d-5b2e-4125-b865-92844198c024", "value": "1536:ZByC/wMMy3EYTgRtxFeqTe8afDU7AVdMIw:Zl/wMMy3ZTgv1Te8afSA/K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772264467, "uuid": "5ce5a4dc-6711-4331-8c94-a02fd2c1b1cd", "value": 51200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264467, "uuid": "61f3888b-001d-4ed9-9aaa-1cf9bc83bfed", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d82f1428-1478-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772264468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264468, "uuid": "5b9ca292-802c-427b-a9ca-5ae6b9074add", "comment": "Malware payload", "value": "c0a32171929d5e6e964390c898d08f91", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264468, "uuid": "abe06a49-0388-4412-b0bf-c631ea68c606", "comment": "Malware payload", "value": "872cce5983786b190e634fc338cb9917f6d54ac1cd5427f90d33199575f266bb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264468, "uuid": "4e432175-0263-483c-8378-1ad997016965", "value": "T1FE8392A0283EB9063D0969077377F550D3E153239A835C106A406375EEAB1973FEBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264468, "uuid": "fca05422-8676-4dc9-9608-56367c83f095", "value": "1536:z7IPlmm3ypp4MpYaTCznPPGa8MiFlLW7q25ppg48G9jPn+byLR6tN8Fbw4iv3Y2/:2PPGDw8P4wFWlLFzjD1nfd+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772264468, "uuid": "d7bbbe54-27ed-447a-91b6-69bf93cb4b6f", "value": 81920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264468, "uuid": "a10f1237-2a55-40c0-82d0-f361f2935596", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd9e27b9-1478-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772264477, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264477, "uuid": "1ba3e07e-8ee0-4472-9f92-44b936b55cd2", "comment": "Malware payload", "value": "745161a9594f081252b09f3f87157986", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264477, "uuid": "d7db897f-bb45-45d2-aa33-d980105d7dc1", "comment": "Malware payload", "value": "86b85d501aef1541a89098f4d5a9b66e7e46f3c768fc22673d739934920c8fb2", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264477, "uuid": "e5ae7a8f-1fec-4c53-abba-51657040736f", "value": "T16C7733E6A3FE71523EF3FE037E15E270C49A52222702F1F2AD5A455167F70D22B8A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264477, "uuid": "4659c395-aa59-4b60-a8c5-012134254442", "value": "786432:Se8IRyF9eA1VGgOZ1DVzzQlWmFunSR6h8nINnLqvXnKmqSv:Se8x9e42DVzzsWCunG6hwINin3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772264477, "uuid": "f7407ca1-c7be-48af-aa9f-0c582f0be2f2", "value": 33162536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264477, "uuid": "5da15a10-7d65-4f43-be17-84d8f93a3a80", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dec271bd-147b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772265767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772265767, "uuid": "6a6a9e6b-3fed-4014-98f8-675eba460c5b", "comment": "Malware payload", "value": "ba6938d907bb8d7587ef6b7652cd472b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772265767, "uuid": "c0905dea-ee45-4366-afe1-bde0f9d6c221", "comment": "Malware payload", "value": "0c7ee46f962a98d3217895e65b18a90ad4583faeb57b23fa50626c97a6c2961b", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772265767, "uuid": "371c92bd-f9e8-475d-9318-1750b5c3b440", "value": "T16534CEC276A17CB7E4081022ABF430FB6DC242D7779B74EE93C67007E6596691787E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772265767, "uuid": "b55aaf53-3ad6-41c0-ab59-1c65f9991983", "value": "6144:atBvC7EhW0I4AitfAPY1JqLH8JuJRnjpqQ21eDTKbI:at+oW/4AitfD1uHquHj8Q+7I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772265767, "uuid": "7e4a5e9a-a686-409d-ab66-ca4791571e52", "value": 239700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772265767, "uuid": "c0b0ab2c-1d2c-4ea7-82c3-82e20e7c8141", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7fbbf789-147c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772266037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266037, "uuid": "5a3a1bf8-9929-43a2-84a2-af298ffacd43", "comment": "Malware payload", "value": "1b7ac6c7477bec6f4785358729460dfc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266037, "uuid": "53f170df-9007-4576-8087-063cbff86016", "comment": "Malware payload", "value": "b8a551aa94f87467cfcf1b1381adcd6967627404ae90a4c82136a9ba5eac8ab6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266037, "uuid": "f856ecba-18ad-4bf6-af1d-613391db9c91", "value": "T1D524CEF06DFF07072E5DA23C96E398069F129F167F397AF11C42A889694CD691ADA0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266037, "uuid": "9d32c8ea-fa33-4503-887a-db148b121d65", "value": "6144:BmNvUgHy4YHPDai3zxHjtLazndZ41D1hxPN+kTs:BYvBS4Yei3zxHZWzSD7x17Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772266037, "uuid": "5b013754-c102-4be8-9c91-8cf6aafb492b", "value": 223323, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266037, "uuid": "fec4a558-a53b-467c-961e-c5c9c9ebc4c5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f5b6fe4-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1772266246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266246, "uuid": "deebe409-22c4-412e-85d9-9ddb348c65fe", "comment": "Malware payload", "value": "316b10940653b65ccadb5c0dca88b921", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266246, "uuid": "aba2704e-e6fe-4511-8f3d-72ff5e0d81a8", "comment": "Malware payload", "value": "6b09183fdd3eb3af13a88f61d0534bfb15a3fd30c2129ad51f51a7359ea7b1d1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266246, "uuid": "38382fe5-6d69-4c3d-866e-b8ea30da96c3", "value": "1C831229135524E5D62280F1D7FD1F84AE591F698EE2EC15BC12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266246, "uuid": "aa3c8846-2f01-439f-8d1b-28ee383427e1", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uB:yYI0ARqw1qAEv7UIFM8oJorFquyjkRk7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772266246, "uuid": "3661bd5b-c214-4b4a-957c-f96fa97dc91b", "value": 82536, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0890e100-147e-11f1-8369-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1772266696, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266696, "uuid": "46f96074-a1c7-4819-b984-5b01d88e8033", "comment": "Malware payload (Vidar)", "value": "3569bb22ecae7f75c4ff6d612e090687", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266696, "uuid": "887bb35b-e69c-4dd7-aa1d-42b5cc24ca84", "comment": "Malware payload (Vidar)", "value": "69c7b3654300bd7f94ba603da9be8f743442dc2e07504685a07f79f1cc318b4c", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266696, "uuid": "245ebb74-be9b-4c51-9332-235e39415a51", "value": "T18AF4129B71F430E9E267427B85514601DB76B8708BB2ABEF479C83582F176D08F39B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266696, "uuid": "22fc25f7-0921-4031-aeb8-953610617a5b", "value": "469e59bd592f93ae01ff61cd0d813e4e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266696, "uuid": "1f5fa026-45df-4db7-8ab9-cc1579b13c7c", "value": "12288:Ir8VpxdYrFgkaW2MGCYhp3VRZIBLV6sCU11VosGfVUV9QdB0KKha+Qq:28VCLcMGfhp3VRyn61U11Vo5f+V9gIfj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772266696, "uuid": "16c04adf-288c-446a-9d89-ec11984c40d9", "value": 769362, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266696, "uuid": "a20d43ed-40c1-46d1-850d-d757ce2b90b2", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8238f7f5-147d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772267045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772267045, "uuid": "7ca057f3-089c-420c-b127-a5473b020cfc", "comment": "Malware payload (Mirai)", "value": "922b8adcd4a2c530c5208173c2e6c0cf", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772267045, "uuid": "1d2ee4b0-c232-465f-93d3-ed3c19900a6d", "comment": "Malware payload (Mirai)", "value": "6cd891f2430fd1043671b25cf0c26355b46e7c60d1a529eacff724d413821aa7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772267045, "uuid": "78ca42b8-80f7-4be8-88a7-1aae522ecf9c", "value": "T138F34CC7F801DEBDF80AE73A48170905B530B7E251825B372297797BED3B0991963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772267045, "uuid": "9851379b-57cb-474d-9fea-0dc3a9eb0510", "value": "3072:l3ooPfxR/EV7ayJcj0/UN++WvMXp4T5VxjbiXLxrA1X5R:l3ooPAmyJK0/UN3Wu4TiLoX5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772267045, "uuid": "54484a04-9acd-48c1-9563-ad04eb60a26a", "value": 163904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772267045, "uuid": "c49cf821-0666-41b7-8160-a6709f15b5aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffd289c5-13eb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772271727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772271727, "uuid": "22e68d75-40f3-4497-a439-022f6a71f4da", "comment": "Malware payload", "value": "2e584d857b5d0218860f86359b6f9004", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772271727, "uuid": "dcaf1d6e-4648-49b4-a973-55233fb54a4d", "comment": "Malware payload", "value": "2c5d60be38c7e78f88868c1c95c6cf6660f9406ec49f4f503bf00810a24d0682", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772271727, "uuid": "a9b30e08-0cf6-4b34-b17e-7ef9c89f2fe1", "value": "T15FF59EB16213FEEB962B0C6CD45439101C9998A7571281E87E8C17DEE19FA18DEFDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772271727, "uuid": "560dd337-c371-473f-8755-b5573fef5840", "value": "49152:8UixbItdTrJoFVPMvXGB+aWJUOndPGxgD:7iBI/JoFdMPGs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772271727, "uuid": "6abfe432-430f-4723-8823-ad31f4daab4f", "value": 3489277, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772271727, "uuid": "ec94a20d-c35c-4af4-b38e-e6a9bc2d8a7a", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf62b7ce-1489-11f1-8369-82aee05be84a", "comment": "Malware payload (SilentCryptoMiner)", "timestamp": 1772271727, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772271727, "uuid": "af92b73f-7622-4dfc-a0be-cae42a903a47", "comment": "Malware payload (SilentCryptoMiner)", "value": "12f2122ed9d725e36c0fd6c6f554277a", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SilentCryptoMiner", "colour": "#4432d8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772271727, "uuid": "19729447-c2d4-45d1-b90c-327cbcf50b73", "comment": "Malware payload (SilentCryptoMiner)", "value": "c2612e66a73a4afd5ca62e4f326cb4f6f29aa625920da9fa6bbdde935604b15e", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SilentCryptoMiner", "colour": "#4432d8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772271727, "uuid": "9d7e9ce8-cc53-4b30-be1f-8b2c8fb398be", "value": "T152235BF21623FD8F8B260E52F40C1012DCACAD633596A4BEBF4445E98AF45189DB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772271727, "uuid": "5fce6462-c89d-4434-b297-af724a3674c5", "value": "768:BxD6tY7oZjevGj0pIElL/1aQj99++BbgM2jDv3L0rx4y7iJScMGq2+FcXPsEmJxk:v6tSol+vDxd5G0brUb0r+iXPFWEEmOys", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772271727, "uuid": "6806fc37-381e-494e-bbad-2271ef2771d1", "value": 48475, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772271727, "uuid": "2b73405d-5f71-44fe-a40f-8025bd44694a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49ba3eac-148b-11f1-8369-82aee05be84a", "comment": "Malware payload (Arechclient2)", "timestamp": 1772272389, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772272389, "uuid": "7695b66b-8be2-430a-8431-a4b4f00d4ebf", "comment": "Malware payload (Arechclient2)", "value": "ca94e72733bcbb2cdaaa56092c6a3c3a", "object_relation": "md5", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772272389, "uuid": "695a2114-3e1c-4ad3-b807-02f2671b1a5a", "comment": "Malware payload (Arechclient2)", "value": "b7cc0e0f2f5db985afe2cee27f4c1e0bddfbdf267783b6f90ea7bac618c4ca89", "object_relation": "sha256", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772272389, "uuid": "4b11c360-6672-4539-a503-610595f9f6af", "value": "T14AA633B180FB8B51ED7EF233DEBC63996822C212D1548F6481AB1BA704DC2FE997D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772272389, "uuid": "dc6aeca6-bb6c-4db2-b496-92d8b56d3072", "value": "196608:se7Xmw9a7odlIhlC9oWmdRRAkQWHA3bXDImgyuId/+jMN1j8X:se72wcodUCeWmRRQfwhc0EuX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772272389, "uuid": "7269034e-4656-4d66-b3fa-fcdde43985e4", "value": 9581296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772272389, "uuid": "a88aa9d6-706f-466b-ac91-8d60a5bddccb", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5d64e20-148f-11f1-8369-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1772274315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772274315, "uuid": "8dba5d71-3e7e-48b7-8804-bfe7b994509c", "comment": "Malware payload (ConnectWise)", "value": "78e6deda055ed2f849168b4a6878d363", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772274315, "uuid": "961e8f91-5751-4c1b-805d-8a651b437495", "comment": "Malware payload (ConnectWise)", "value": "e2d1fa5b50b501c93c023164b6028f2d0d91af22319f3ee1d1774a9542c9d3d8", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772274315, "uuid": "b767b440-c8eb-41d6-a199-e3b4df3e9798", "value": "T1F0D6232523FD405AF8F75B39FD7682E45972BE64CE21C11E9328B90D2A74D8096723", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772274315, "uuid": "f9eeb188-c7df-4119-814f-0c33a1f20f2b", "value": "196608:CWh0cGwhWh0cGUWh0cGjWh0cGwWh0cG+Wh0cG0Wh0cGf:CWacHWachWacUWac3WacnWacLWace", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772274315, "uuid": "7d6bd186-9c03-4331-b318-6b782974cade", "value": 13549568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772274315, "uuid": "19bb8ab3-4196-4ca3-8b49-544ebd64258b", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00998677-1492-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772275273, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772275273, "uuid": "f994d94c-b467-40c5-acc7-6bd3bec30dc4", "comment": "Malware payload", "value": "15ca7b922a1aac7ed42eadf3a5907c23", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772275273, "uuid": "8ed9d48b-6ed8-4710-b631-4653b1d4ef02", "comment": "Malware payload", "value": "645dcc68952455beba14cf887f875c9de216c1911096d2faa84d0889e5863a1d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772275273, "uuid": "cb1cae59-8a0a-4513-bbe6-ad91c3c1f3e6", "value": "T1FEE4AFB68255EC9F0E1C0E71F8180B4A4C6C58D7E678D2F87A82B4F887561A44EFDD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772275273, "uuid": "b4d5639e-25c4-4666-b1be-7f598192c979", "value": "12288:qABKEbw97LzNLI12pXGxrb0UckHZqzcLu96AOvO:CnRLzNLk/HxckHZqzcLuwAMO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772275273, "uuid": "6e20c212-daef-49f3-9574-0e741d61bfe0", "value": 659540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772275273, "uuid": "ff98ead4-5523-45c5-80b2-1521763207bd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3642f346-149b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772279228, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279228, "uuid": "b0d3a3c3-dfe5-4998-9d9f-3dc42d79bf5c", "comment": "Malware payload", "value": "5788b7b81e5166503f2741168e314824", "object_relation": "md5", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279228, "uuid": "9df5ec4c-1546-412b-8890-87c0ce05700a", "comment": "Malware payload", "value": "09811809d330ddd715fb16f9e800aabfce8feec550e69fcf08619daed9c8ebcb", "object_relation": "sha256", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279228, "uuid": "4753d7fa-5294-4088-a66c-94761564a57d", "value": "T162B1CC2D075ED1689BE6A18BE9DBE181CF76122B3028DC1A35FFD681DB1E055C2387", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279228, "uuid": "8e1901da-b3b4-4638-bf3c-d27eb4c89fb4", "value": "96:DTQmilyf92F1lPWZiLjWxg6PcGbUJUTEp5FlAPAlEg8W+lIi/vlBE5MlKwpOlpdH:Qmyyf92FfPWZiLjWxg6PcGbUJUTEpRAk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772279228, "uuid": "3c646f7a-52e7-414f-9cee-85e8bd140318", "value": 5267, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279228, "uuid": "6abe8739-81c8-4841-8521-2bf9c5525006", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "36941e5c-149b-11f1-8369-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1772279229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279229, "uuid": "f89359d6-be9f-4931-8f6b-65a9dbe38dae", "comment": "Malware payload (QuasarRAT)", "value": "e133cfa2403247675216c8f317951b10", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279229, "uuid": "9ce577e5-33f1-441b-929b-84348fbea1e0", "comment": "Malware payload (QuasarRAT)", "value": "c656b80ba545c37b4a4e5db63784bc119354d728d7bedbfa10a8ae6631f5d165", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279229, "uuid": "90fb0b90-ea10-44fe-91ed-7bfe0669a6b4", "value": "T19725E097BC729EFCE1448DB79454E2DE0DBAA3AEC7D21DD2D1B61890826AD30D171B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279229, "uuid": "0320cdb3-3b26-45e3-b410-1cba7e20a943", "value": "a9c887a4f18a3fede2cc29ceea138ed3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279229, "uuid": "b250dcf9-1639-46a5-96dd-63490a286479", "value": "24576:fCtzZo1iwJpFTnoLqxYXgEu1e4jkw6Hfm8+a:6bolsmxYw71fkP+81", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772279229, "uuid": "ae3b807f-d2d1-42fb-a2c9-d93b2e835f27", "value": 1042944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279229, "uuid": "81bb59a2-e4fd-4df4-850f-86be410bfab7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b6d46403-149b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772279444, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279444, "uuid": "aacf5e9b-4e7c-43c9-a189-b33cdea766fd", "comment": "Malware payload (Mirai)", "value": "aab99c4efe8cbdcb3f7c440e9413afa2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279444, "uuid": "43e580c9-41bc-4c9a-97fa-946f13123422", "comment": "Malware payload (Mirai)", "value": "0028541b6b0285ef58de8783b7b00c0b5bfb1242e48ff27625d22ca4fe05bb76", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279444, "uuid": "07697ad1-7591-43e4-9d61-e0825b22df2d", "value": "T13CE31A45F8505B23C6D612BBFB5E428D372A17E8D3EF720399216F25378686B0E376", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279444, "uuid": "b16508be-16de-46e5-a443-0cc1c77c3a8f", "value": "3072:3ITEs7uRKpUlWnF46r/b9l5n5CYp7G7Wz:3ITyRU66F46Tb9Hn5zNVz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772279444, "uuid": "0cb3925a-c040-4d7e-9ca7-e228b7aca734", "value": 146208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279444, "uuid": "2a3bad5c-432a-48dc-9e6e-2a3232ac2732", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b85cdb6-149d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772280016, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772280016, "uuid": "31b9b35c-5c0c-46f1-a86e-84dff5f63d59", "comment": "Malware payload", "value": "24ab4d83ca9aa8c87556fc6a847f602a", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Bitpie", "colour": "#c41494", "exportable": true, "hide_tag": false }, { "name": "FakeWallet", "colour": "#2fb17a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772280016, "uuid": "fc90caac-4b4b-43c1-9c9f-ec6ab2ff8850", "comment": "Malware payload", "value": "b244764362e6996c6b9e9c63290835d3ab2b24d5c5f24182d110b1711eff7132", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "Bitpie", "colour": "#c41494", "exportable": true, "hide_tag": false }, { "name": "FakeWallet", "colour": "#2fb17a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772280016, "uuid": "c58b4003-fa84-4698-b487-af47ac24f0ab", "value": "T14A182357F36AF86AE1F39B32CAF1202760151D908B13DAA21D01B5385EF7AD0DA4DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772280016, "uuid": "7b4ebefc-6db8-4a2f-8ab4-1685bcd7bd5f", "value": "1572864:PXs7BXkGwV4vz9dPULa8AR1HB0EJ1HB0hyaWG45m2B:PXIijV47f8La8Apbhyyacz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772280016, "uuid": "f07a1105-48eb-44c6-99b1-5a451cd97517", "value": 87112839, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772280016, "uuid": "03da038c-6be3-4970-a58c-9452fc168b6d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa6aa792-14a0-11f1-8369-82aee05be84a", "comment": "Malware payload (RustyStealer)", "timestamp": 1772281571, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772281571, "uuid": "8505f677-5a1d-42c8-8fa8-03e94a907ce8", "comment": "Malware payload (RustyStealer)", "value": "094ae616b16f6bee4ceffbef7bfc5fd6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772281571, "uuid": "c89375e0-1262-40ed-842b-b74fd6320ebf", "comment": "Malware payload (RustyStealer)", "value": "cd5f3b39033e47bbfb251589c8517f717d98a05015277e00817ed391cd13e8de", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772281571, "uuid": "ec04224a-478d-4881-8e50-82f7f7b3d08d", "value": "T19AF6281010DA6607FD7EEFBD85DCB6444F7AB2953722FA389B4109E90FD1B08C9429", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772281571, "uuid": "28429f21-7adf-4611-952d-e15198184e36", "value": "196608:S0c1TXsxrZciO7TQMnCO2NnGv+Lo/qGASgW2dYRIdRBW3Yz5lTcR:SxXUrZ5CTfYpcmnYeRBMo5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772281571, "uuid": "fb8a05d3-a78b-46c1-8901-d07feb0c395a", "value": 15973888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772281571, "uuid": "ae65bf31-7c5a-411b-807d-07f48c1c577b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d07ae896-14a8-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772285070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772285070, "uuid": "67401cec-a3f1-4cc8-8965-a710c672115a", "comment": "Malware payload (Mirai)", "value": "fff4c62211b72fe48eac7802ca0b6c0d", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772285070, "uuid": "0c728d4c-d008-4065-9408-eee50800fe9e", "comment": "Malware payload (Mirai)", "value": "5f8431274ea95602832321195e6cbd0dd594966b8218e836d1a9d50d1fd2c681", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772285070, "uuid": "0bb91326-ab39-4f4a-8c56-576afa6703bb", "value": "T15EA34AC4F743D4F1EC5701B16137FB36AB32E1B5212DE943D3699A33ACA2541DA0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772285070, "uuid": "69cf078d-128d-435d-bd92-6e6c493fbefd", "value": "3072:hkAFVLsS9EYiWZgs3b5HLHyKXBcu6JL+B:hkAHLs6EL2gs3tOxL+B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772285070, "uuid": "66bb544b-0cc5-4152-92ed-af1e92dacd3b", "value": 103404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772285070, "uuid": "a93c40b3-eaa2-40cd-8967-faec76477081", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "227b95eb-14a9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772285208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772285208, "uuid": "27dc27d8-0845-4441-96bc-aa64fda1dec9", "comment": "Malware payload (Mirai)", "value": "0c174a34d2c1bd9c5941da2e7c4e3292", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772285208, "uuid": "7891c85f-ce1e-4b2f-a5bb-9eedb7298c02", "comment": "Malware payload (Mirai)", "value": "01b064d7885a173901721afbfa805c4677a0c8326c2be1a3e4e1eaefecb5ddac", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772285208, "uuid": "8ca0b14d-4579-4469-a84e-1ce59ab4a419", "value": "T17B142A46EA404B13C4D627B9F6DF42463333979493E773069528AFB43F8679E4F12A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772285208, "uuid": "0f39b600-61ab-4aaf-b0b1-07eba50e00b1", "value": "6144:2R1aIBqbNragXnDWS24eLlBOIA0rM/RuRw:o1atbNraInDWS2DFA0A/cW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772285208, "uuid": "8f95f1fa-e515-4058-922b-a189d79f1e18", "value": 198026, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772285208, "uuid": "f1303ab7-db5a-4881-bbe7-8db13b7e011a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7d86f46-14a9-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772285459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772285459, "uuid": "9f56a454-b449-4c81-b634-377bf714aff2", "comment": "Malware payload (Mirai)", "value": "990483b683b841405669deccca9df010", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772285459, "uuid": "11649794-87bd-498b-8b73-9a51de3ea46e", "comment": "Malware payload (Mirai)", "value": "a97255887e37b592e949a21269743dd1c48136532de5a422fd74ac7cb0009375", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772285459, "uuid": "dd116d81-c541-468e-8ec8-f5a2205d00d7", "value": "T16814961E6E228F7DF668873447B78E25975C23D627E1D641E2ACC2105F6028E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772285459, "uuid": "010c1a82-944e-4e97-b11f-f89cf6d75569", "value": "3072:3c2nXadriWo282fLLTwMif6md0gM3eDBilA+OEuoz:s2Xgo2VfsMo6eMSBp+OEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772285459, "uuid": "7bd2c2dd-74cc-4968-882e-87fd94ef8118", "value": 194176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772285459, "uuid": "87277bf2-4e36-43c0-981e-3e95d5e3044d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "773e0dd8-14ac-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772286639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772286639, "uuid": "34bb3473-a7e4-4346-b35d-9da11b851ec4", "comment": "Malware payload (Mirai)", "value": "c5d82654fdc0869d329f86dc52c70dda", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772286639, "uuid": "e8b096e3-897d-4e61-a157-a6514ceaf6ee", "comment": "Malware payload (Mirai)", "value": "705e6e5da93bf7e0b85c816bc931df01a4cd1c5353ae4252ccda4934d6f0ecca", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772286639, "uuid": "e2ad0076-9b6f-41fc-b560-6dad82b9a79d", "value": "T1B0E33A17B5C194FDC4DAC1744FAEF53BAD36B19D1238B16B2BC8AA221E4DE305E1DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772286639, "uuid": "5a16b747-b090-4bcc-a5e5-9358d217c865", "value": "3072:8qyoG7VMD+5T27M/euhAC0EFGGXGxgUFCu2g5FY03lpF:8qyoG7VMD+5T27M/pD44iPpF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772286639, "uuid": "2649b7ad-7168-4ee2-9e90-c694013b282f", "value": 152424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772286639, "uuid": "6af4743d-09d8-4388-a7ff-41c169acd707", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "69517940-14ad-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772287045, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287045, "uuid": "bb2044db-7d13-434c-ba50-ec8cff0791ee", "comment": "Malware payload (Mirai)", "value": "371d785f78849602d65ce9f47d0be80f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287045, "uuid": "0ac84fb2-9dfd-4aa8-b32c-b17c846c2c93", "comment": "Malware payload (Mirai)", "value": "25288cad794b24493591a62e4749849f0a7f9f003c42b6c0976a9099ca95d1a9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287045, "uuid": "de53b46c-a238-46b7-9d12-30112b82c046", "value": "T146E33B06731C0907C1A32EB43A3F67E193FFAAC121E4F644255FAB8A9571E361486E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287045, "uuid": "ada8a520-fa19-4c7b-8e46-2f2d2c50d01b", "value": "1536:vUDTFLKa1RvU1IWkPdxfTIrEPXuZGOtu7B74D3vAqjtzzuoeNDqKBNHko9C2:vUtRNWkPdxwE/067x4Eq6Eg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772287045, "uuid": "7315e7d9-fdea-460d-92c9-5f9931201ff2", "value": 146356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287045, "uuid": "882b0354-fc73-4b07-a135-2b03825cbcb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1772287453, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287453, "uuid": "00e94e4e-1a2a-4f11-911a-96ce5028965e", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287453, "uuid": "26ae358d-bc97-4f7b-843f-0b697b8da0cf", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287453, "uuid": "505625ee-24d7-4e32-8995-865fd63a4bec", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287453, "uuid": "44461212-2952-413f-807a-8b93838177dc", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772287453, "uuid": "519f17d8-c973-45b8-a2f0-5a0d171f5c2c", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287453, "uuid": "db5e7164-37c6-42e1-876f-9b22102c1775", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287453, "uuid": "17d28a6e-c5f2-49ce-b53a-c1c777b68145", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1772287456, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287456, "uuid": "00ea96c9-6546-4285-8a13-921ab05d73bd", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287456, "uuid": "39d5f605-1560-4449-b785-47501f9afbe9", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287456, "uuid": "fbf8c7ce-7109-4a6a-924f-f4aa08697a5e", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287456, "uuid": "3c8b5005-fcf0-4cf0-865d-3d3025dafc6b", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772287456, "uuid": "8258a7d6-3c31-45f7-a3bc-ccbbf4152e7f", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287456, "uuid": "74f772f8-6abc-4a33-b43e-fba5a3fe955e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287456, "uuid": "3d0dd1aa-2dc4-42ed-b27b-b8c7bdfd0489", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96278c69-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772287550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287550, "uuid": "5a112008-84e9-45b6-a4cd-1032c4df2d14", "comment": "Malware payload", "value": "b668ce9b229cb4861c99333cce5e4284", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287550, "uuid": "66a0d4ba-da82-4063-a8a1-d8cca408892b", "comment": "Malware payload", "value": "ac60a7c6e6921dde3ffe8cfdf6db530ee46f894c8275393a2ee9b94b4504687a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287550, "uuid": "cf6f25c3-5a1f-4d3d-8029-cdfb613c0abe", "value": "T15634D0DC34B05F25F0125D2CEACD267A86D72F10A5693F9A42610BF6329E9CA34B71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287550, "uuid": "776561cc-fca4-41cf-bcb6-1d5c5a092ce2", "value": "3072:xmparfXqtcYdkggrgsIzjKRwiU1fmHZ5/MHGIuwXKejM6q7AQB/M8ySqAxGOW4hb:4pwfXjVvrm4KqxMm5ejyAJS+OW4QXuqM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772287550, "uuid": "1fa18e44-97a1-4211-80c3-bce913a44260", "value": 239703, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287550, "uuid": "a0953024-0476-4ed7-b636-deb6861f3bb3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7ebb30e-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772287579, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287579, "uuid": "8e7e78a5-be54-4f5d-b8d8-fb2ce8e94fac", "comment": "Malware payload (Mirai)", "value": "d0ca2da7bc47daccc4f5f378788a6e7e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287579, "uuid": "a1c5e0c1-f984-42dc-b326-14ff1b356f98", "comment": "Malware payload (Mirai)", "value": "9093723b95effa744341daa0da44328264bc0088268f20bd0ba85bfc1d792fb4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287579, "uuid": "33c7124b-a3e7-4fa3-aabb-6ea5aefc3c58", "value": "T19814E81AAB550FFBDCABDD3706E90B0139CC944722A43B3A7674D528F54B50B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287579, "uuid": "b90e359b-c450-4e07-9752-83b1ce3209a8", "value": "1536:ZApm3TGAbl4qCHcwM7d0aTswUNt8h7cF8aRzEtZvdue2lU1LgXZAqxjE8XNCIwgR:apm3TRqqlF0Cn25lTXCKNCmhmCYOCA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772287579, "uuid": "d7e8cfe7-27f4-435f-bc5a-27909ace80e9", "value": 194464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287579, "uuid": "c2384532-5a4d-442b-97e2-76af9cb4355c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3d07eafb-14b0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772288259, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288259, "uuid": "2262879b-8145-4e06-9819-10ebb83d0d2d", "comment": "Malware payload (Mirai)", "value": "13be3a5f657cf7c4dc646e5be2abbe3c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288259, "uuid": "799eeec5-e720-41c9-8d3b-a2e8ed9a412b", "comment": "Malware payload (Mirai)", "value": "f09b6f5b34b070fea926dd9cf377626d2cea79e8d23862bce34e4a477b7e5485", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288259, "uuid": "e9f958c4-eccc-49cf-a019-8ffb1d9eb2aa", "value": "T112E31A45B8405B23C6D622BBFB5E42CD372A17E8D3EF720399216F21378695B0D3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288259, "uuid": "83faff6a-6911-48c2-929f-f39c1bd8e79f", "value": "1536:e451+mp2YK6lmoTu3mbMAFxvWMf338uApPm4VKpraTWzqsN/OVCOk8q2lEWKr+g+:e451NtMErOwn8ub4mG2qsN2zsWMBMLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772288259, "uuid": "f66aad82-ad08-42a6-bc18-9bf3c55a8122", "value": 150304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288259, "uuid": "14764888-393c-454d-86ef-d3537c8a9dcb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "468d3a93-14b0-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772288275, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288275, "uuid": "61b9c44f-0c99-44e3-abd8-505b4d3abd84", "comment": "Malware payload (Mirai)", "value": "865b7883270dc5b996888c5ca5f2299f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288275, "uuid": "523f9d7a-ed34-499f-bd07-ec9d9faecec6", "comment": "Malware payload (Mirai)", "value": "75ca070cc4c618006c8252e7e4cbcedad56400a0688bab3ba7ae2a8c79b9c0aa", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288275, "uuid": "9e06c78e-ea5d-4576-9989-fd53a6677521", "value": "T1A0F34CC7F801DEBDF80AE73A48170905B530B7E251825B372297797BED3B0991963E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288275, "uuid": "71679b62-19d1-48bb-a647-a75bbd21e03e", "value": "3072:l3ooP1xR/EV7ayJcj0/UN++WvMXp4T5VxjbiXLxrA1X5R:l3ooP6myJK0/UN3Wu4TiLoX5R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772288275, "uuid": "760f48e3-92f9-490a-b064-6543fb865a0e", "value": 163904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288275, "uuid": "6cb5f61a-d3e1-4c3e-a161-98e6b25cc190", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9007185b-14b1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772288828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288828, "uuid": "1ae6d14f-4f4f-4801-933e-feb537b3119b", "comment": "Malware payload", "value": "b5fef2a2dc8a657b1d29a2f6dc21b455", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288828, "uuid": "534c0073-d248-4672-919e-bd8adac57a9e", "comment": "Malware payload", "value": "c1f58f7477dc9aa86812920ed9bc39275bb217175668db69689e9573edc4a765", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288828, "uuid": "4f3c2206-f311-4857-b0bd-d2a32cc2106f", "value": "T1E221C10267A50715E2F34E731C35F3114B22B5A6AE57A75E094091C828A4B15FD79E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288828, "uuid": "c9d7ca68-c339-4cf3-ad20-49a1d9894c0b", "value": "24:8vJDf3mCLqagA/6yj+/xd+0pcp94I0JH/hp4HH0S6iHpAmECj2R:8vhm2L3kdOpiI+H/hp4H56SpAf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772288828, "uuid": "c2e8aea1-d172-439c-b56d-99027560e649", "value": 1405, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288828, "uuid": "fd2c51f7-7beb-4004-889c-9a41a4699302", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e83e0d80-14b1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772288976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288976, "uuid": "7ad1335c-0598-40b7-a491-dd31424ab175", "comment": "Malware payload", "value": "9778583e1031b1b8aa3401728dd2a143", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288976, "uuid": "837ac377-0c1f-49f7-a0a5-fdfa7916f800", "comment": "Malware payload", "value": "b31bcf5d858a2e3983d0fa33ae9f1d5e092ce3660842f82053a93cd2dba07aea", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288976, "uuid": "247a965e-ebb0-4dc5-b822-6a598e13ed20", "value": "T17A3401F4BFBF65A7AD955869105D9D137E2584EEEDAC27C8122F810D4C0B283F27A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288976, "uuid": "1f24253a-b6c6-46f9-b7ef-fd48f38c46e6", "value": "6144:sp7IGARBNNx5cFKUn41Cv1TWFofoezW78UQL:sJS/x5cFKD1CHwei78UQL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772288976, "uuid": "96bed96e-7f84-4433-8ed9-ff9b05851ddd", "value": 247884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288976, "uuid": "2c8eb99a-33d7-4936-abb4-748efda3af77", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbcfb360-14b2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772289438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289438, "uuid": "b90bc145-c4d0-4f7b-b094-d16f67b17b0a", "comment": "Malware payload (Mirai)", "value": "e134e8cda45cf202254eb7641e747d8b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289438, "uuid": "a46fbc29-46ab-48ed-8760-8eb52b65b946", "comment": "Malware payload (Mirai)", "value": "6856d9075a032de9f5c4565ed4fbd699634e86e6001599a0b61bc88a18b050f3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289438, "uuid": "97319291-dd1e-41cd-9a89-a9aa73317e98", "value": "T185F31B45F8814B12D5D112BEFE1D128E37231BB8E2DE72129D245F647B8A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289438, "uuid": "55503ad3-432f-4229-939f-a535f9ee8ddb", "value": "3072:ZcLaYzU6hhoTXubj7I4XaO7PGJ8VGYvDYbY:ZuaYzpQTXuv7IyaIXGYvDYbY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772289438, "uuid": "808a3315-a90d-482e-8d8c-706c6c6df7ab", "value": 157596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289438, "uuid": "8f71e594-0465-4a0f-9eac-88d8682bbcd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d247248-14b3-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772289521, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289521, "uuid": "018943d7-0a62-4790-8a7c-8353bc7cc06e", "comment": "Malware payload", "value": "e53a422dd92e265b5d0b0be77824f90e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289521, "uuid": "2fadbe2f-05db-44f2-ba77-b5adeed28905", "comment": "Malware payload", "value": "919fc0a8d86ffb4d6d675b83534e55c6db12a1bd9e82517601ee4cba18434326", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289521, "uuid": "34324c63-bce0-4973-9364-b590cf646fec", "value": "T1D28309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289521, "uuid": "903b64a1-1c90-448f-acb6-d21870be8c53", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn4Wa8VN/:XEKltp9txAX/yr2pb4W1VN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772289521, "uuid": "469aa48d-6ae3-4fb4-a35b-caac13a783b6", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289521, "uuid": "11970f88-18c6-47c7-80e4-09b33e03378b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29b61246-141c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772289909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289909, "uuid": "6c1961de-7ffc-4983-be96-a5aa6792f9b3", "comment": "Malware payload", "value": "6391a0a07cd7fe24d26159303e9913ef", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289909, "uuid": "ae88da48-4f0c-46c5-94c6-d8b78c78576e", "comment": "Malware payload", "value": "dd16432c830384c1a26ef606f85c4d113297c2b5119796780868d762a7a93ce1", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289909, "uuid": "e52acf35-3311-4cd2-8e54-b70c8fa179ab", "value": "T15F92EE6345F6CE0D3F1CEB46A8B99B34EEA72842F350B9E79DCD50CAD85A9D5010B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289909, "uuid": "9c1f6c39-9afc-446f-b6ea-fb1b7f949bfc", "value": "96:0Fsqu16dwVnxdBMfqIKnMVuxy/HUJL1a0E6z/NZ4peyZfxjpGYOfSwoSiabwdyxR:IlPLLLOK+wYxQm7T8RCSYFfTAQpKHa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772289909, "uuid": "c1a12507-fc1f-4212-bc1c-7616808490a8", "value": 20225, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289909, "uuid": "003fd2ac-e933-45b2-a383-78c4f7cc8d24", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6dc9a5e-12d3-11f1-8369-82aee05be84a", "comment": "Malware payload (RemcosRAT)", "timestamp": 1772289910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289910, "uuid": "6541208b-1e11-49b6-83ff-615035bff526", "comment": "Malware payload (RemcosRAT)", "value": "7998aa5ec5515ae80a5fcb6f246e6bef", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289910, "uuid": "3f481c00-b90a-4aef-a7e4-4779ab5907e3", "comment": "Malware payload (RemcosRAT)", "value": "4f0c95a1885411100649bf8150c2f189dc0941ac569b801b3765d1ca64b760dc", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289910, "uuid": "4f477978-6385-4c70-93b9-48ae53942d6d", "value": "T148B4B001B6F2C172D976A4300935E774DEBCBD201836997BA3D61D9BFD30150AB39A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289910, "uuid": "d9f96e8a-65dd-4905-9afe-7822a071db34", "value": "737fc4be4f9f7d7c06c790667c9f7669", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289910, "uuid": "29c7bc9e-4ab1-4609-840e-907603c028a8", "value": "6144:2XEE+QEZJvHVdFjl0WGYB+cvbWvpB+qADnN8XIniCrVSMXcvOsAORZlAXiBcea:sENlHV9FGeDWv3jADnyYiCNrsPZlc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772289910, "uuid": "b914e874-61ff-43d3-9e07-1ed36994d036", "value": 528384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289910, "uuid": "6558e0f8-3090-4c3a-a8cb-34962a87174a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "55592cfb-14b4-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772290018, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290018, "uuid": "c56ca5ed-6336-415f-a85c-ca993a062d9d", "comment": "Malware payload (Mirai)", "value": "6e4c7f1708f7c3b842c01440e939558e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290018, "uuid": "813d7b55-9996-4b4b-91bd-9604d79711f3", "comment": "Malware payload (Mirai)", "value": "22abccc3cbe9afcd01493140dad8b3d00baef8a1d0818fd9de86f140248fe77b", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290018, "uuid": "05fbc6e4-4c46-409e-92e5-d7804643cdfb", "value": "T16C564B19EB8789E6F3A355F0134AD273693050199077B6F2EF8D3B65743A3406F2A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290018, "uuid": "44273840-8992-40d0-a2ba-b7294a44f3b1", "value": "98304:B+QbDl5Ah5ue37o15nzWcOmpnZ2Xv+Pw6XedZMC:B+Sh5AgXDY+ZudZN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772290018, "uuid": "3027e154-1102-44f7-aa60-aaa7bf1e4e0f", "value": 5915672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290018, "uuid": "3fa02f02-f02d-46ac-8f1f-1c9687ddbdee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cceaec60-14b4-11f1-8369-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772290218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290218, "uuid": "a5d7826c-7f3e-4c11-89d5-6a27bc5eb242", "comment": "Malware payload (NetSupport)", "value": "2f0204526fc405f8a936e1707ccb8e19", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290218, "uuid": "2a3c3d57-0204-49f0-83a4-ca61244e2e4a", "comment": "Malware payload (NetSupport)", "value": "c9e5bb7a368280d771edcfdb33717a3130560d2bb71773ab1aaffe0eb585fd2c", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290218, "uuid": "01ca2990-4063-4db0-8747-049f08d8e699", "value": "T176D633A4A6E815EFF9EA933DCC51D992C89675A63B49C193C3F8D1A12C733C4663E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290218, "uuid": "582ca70a-119e-4e50-96d5-9dfa78f742ae", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290218, "uuid": "6dce71cd-71bb-41a9-9e18-fd59b4477ee3", "value": "196608:da14oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuor4+kYurH/P/XRLSq2KKeF:da14FSsFl7dCR1C99/Lku3+kYuDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772290218, "uuid": "3e151e3a-dfc1-44f2-b0a4-46f7c0331863", "value": 13423105, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290218, "uuid": "524f7ab0-cdae-41ba-bc63-7e8cd424d378", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5faa13c2-14b7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772291324, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291324, "uuid": "62083938-4681-462c-b3f4-f7bbe762eb71", "comment": "Malware payload (Mirai)", "value": "05037c14b32700447995010208cb8b68", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291324, "uuid": "71523c82-d102-40e7-adae-10330e12729f", "comment": "Malware payload (Mirai)", "value": "043ab6b18ecbe610cef182efed798dd68850c048abe6b59624b6101a5ea6f772", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291324, "uuid": "1fb792bc-5a72-4187-ba9b-4ad4a18c3567", "value": "T1F692C06F646060C0D2615836E6ED9EC7E2B60BFDE3E8307107A85A5CF26264073760", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291324, "uuid": "860beed0-078f-4885-b0bd-29882c11a5f3", "value": "384:A3CFDQy54M7zLnmZFiPThj6r8CKozfdchYC+Gyx2QSHWzO6DkhymdGUop5hte:wCmyqM7zLnmZQLh+IWfdzFG/QPzNDks8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772291324, "uuid": "403cd5c7-cab6-469a-a49b-20d791a5ee79", "value": 20524, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291324, "uuid": "c74ae00f-e6c2-4e74-a833-3266efa95af3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "649439d6-14b8-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772291761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291761, "uuid": "a6867ee4-5b05-47e7-9e2a-4c2842664d58", "comment": "Malware payload", "value": "d35d7ac73526af87818bc34b8217760c", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291761, "uuid": "eba1e315-9063-4a44-be34-6b5da84794e4", "comment": "Malware payload", "value": "d19ce80f89099393ca69ad2cddb3b799d5c69f5933f2541b8b262e9d82615d35", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291761, "uuid": "f5c4c7f8-7a20-4111-8a49-5f0a24fc85c7", "value": "T1C7E58E47E1A370ECC46AC1B0934BB632FA75B4454434BDBB95A4CB313F72E506A6DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291761, "uuid": "f4599440-9bf4-4c6a-b9a0-8c00dc03b8c2", "value": "9672c68241368d46e3ea60b53aac03ca", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291761, "uuid": "57490381-504c-4a15-a817-8153b0d4c414", "value": "49152:gHafbLaq5QlgQrDhmKgO5ugdRzxoRbrTC1G3iINij0dnFb9lQFNgDQpC56O2Y9hY:geQl/h9ugrY8SQIh4L1K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772291761, "uuid": "12fbf2c1-9f8d-4700-8517-2ed33247ae02", "value": 3228672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291761, "uuid": "858cd843-d5e6-4f58-ab06-0b4bb2d48dce", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0933b44d-14ba-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772292467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772292467, "uuid": "afbeb628-6c3b-4121-8faf-b2e07d12e353", "comment": "Malware payload (Mirai)", "value": "daae2c5b4fd882e167ff62449ec87b6e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772292467, "uuid": "a70fc642-3f86-4d86-8d46-36f546ee2672", "comment": "Malware payload (Mirai)", "value": "76b05b1a1afd7de61c4b9be7c02c3f6515e4aba0f59269416a670e06fc9d709e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "fbi.gov", "colour": "#2cc04b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "moobot", "colour": "#ca42ae", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772292467, "uuid": "19f33b5a-1a7d-4d5e-ad79-5241289ba748", "value": "T14CC37B33D82A6F68D159E030B0718F792F53A59282875FBF59A6C2758083D8DF905B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772292467, "uuid": "a6d50bc7-36b8-4925-822f-c06a15f0a2af", "value": "1536:ywxGXM/nvXvjuZ+Zj8wvoxloxtC+7Ks0AEbcpoYIMrTGjZzDkhJvDV4WjHQRr3/2:ywxtfvXDZjjhxtb+s2khJp4WLQR7z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772292467, "uuid": "e68ec265-63ba-451c-b59d-0367ce73620f", "value": 129888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772292467, "uuid": "c026c66f-f733-4af5-a96c-5b54001e4ab4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "109c3e97-fc73-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772293460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293460, "uuid": "78d0ad16-af19-4ac5-bd72-f0499d2323f2", "comment": "Malware payload (Mirai)", "value": "64f9f4b9ec621e9ce9294fbf596bc6d0", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293460, "uuid": "3c558df6-f164-41a9-93d2-78693701cfc8", "comment": "Malware payload (Mirai)", "value": "664c96ecc2763ca7df83e60a3a118d1dc52121012d396713969f910db22c695b", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293460, "uuid": "2a107aa2-9504-4e85-bda0-33f2c06812d1", "value": "T19B6412ABD9767DCBFE1B4FF021970E4E5EFDD2CAD2C668905215048026FD346A290B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293460, "uuid": "0f92e1a2-4e2a-4cca-9655-f3b6ed117da6", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6co:7O/QJHZweEL/NOjCHm7FZZnc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772293460, "uuid": "166c2f1b-b171-491b-8005-ec236e72e8ba", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293460, "uuid": "ecbcf6ba-b350-46e8-88d0-dbc159d558b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b56f1d82-14bc-11f1-8369-82aee05be84a", "comment": "Malware payload (Babadeda)", "timestamp": 1772293615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293615, "uuid": "3ed55a51-7aea-4cc0-95ed-5f4e0df2cb90", "comment": "Malware payload (Babadeda)", "value": "71dc12c35701eda03a9e2e123ea61bb8", "object_relation": "md5", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293615, "uuid": "6a6978ed-782f-4570-8de9-03d379c785ec", "comment": "Malware payload (Babadeda)", "value": "ad467bfe9afddaff571d7ba614766d129582b3ad18351e854b8498abbc5bcf48", "object_relation": "sha256", "Tag": [ { "name": "BABADEDA", "colour": "#c25d29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293615, "uuid": "30a9bf74-045e-4662-be9a-78465c57c853", "value": "T1DD936C41F3E642F7E6F2093201B6712FA639A6289714EDD7D38D3C029A51AD09B343", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293615, "uuid": "501150ad-c5e2-4c6b-87bb-bad663b9fc19", "value": "5877688b4859ffd051f6be3b8e0cd533", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293615, "uuid": "ab8e0a76-c192-4d82-b997-258890feaf8b", "value": "1536:Y7f9h0UPJP/CpICdikMLMLv5PFNg1qrX+VIOlnToIfwgIxoBLMeOR:2liUPXC8k1nJrX+fNTBfkWFu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772293615, "uuid": "d8869957-e9a1-4a68-a3a9-b5d02a0144d2", "value": 90624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293615, "uuid": "75975385-5a90-4399-a569-d0ccdf36dd32", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a2f260f-14bd-11f1-8369-82aee05be84a", "comment": "Malware payload (GoProxy)", "timestamp": 1772293811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293811, "uuid": "482011b7-f417-4836-b0b0-10daca8d0266", "comment": "Malware payload (GoProxy)", "value": "54be6ae28bafeb4e681492fead5ab4fc", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293811, "uuid": "f05a3c03-9df7-47f1-9ab8-ddc6ea03899c", "comment": "Malware payload (GoProxy)", "value": "157879b573e2d2b14931dc28fd58941694bc10bdae9c6b785755b056334564e1", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293811, "uuid": "e2e63cb8-e5df-47a0-84bb-837801bd3070", "value": "T12E663903EDA155E9C0AAE23185639153BAB17C485F3523D72BA0F7382F72BD0AE797", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293811, "uuid": "6022e989-51eb-48e7-b048-70e103724a9b", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293811, "uuid": "34263df7-2fa7-462b-a31c-df25e60beb85", "value": "49152:x5LGu0XFTWTz3+5GyGoaKNo4FSov0HvLptrtN3TpKHaNPIUKTrg0ybqj5mY9N5Uj:xlGW3yxYvttrt1xN4fyu/EbsE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772293811, "uuid": "493e1cab-d238-46e1-9678-5bb2e8807948", "value": 6517248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293811, "uuid": "cdad1daa-26bc-41a0-ac60-c4aaaac6e2a1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94754fd9-14bd-11f1-8369-82aee05be84a", "comment": "Malware payload (NetSupport)", "timestamp": 1772293989, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293989, "uuid": "703adbc6-4e2f-47de-9586-98ab44490530", "comment": "Malware payload (NetSupport)", "value": "6b80c8998e3ab193824a2dd4a4443447", "object_relation": "md5", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293989, "uuid": "fe5184c4-e1e7-4b62-ba1f-d89c4d3a6615", "comment": "Malware payload (NetSupport)", "value": "712c7e845543e6ddd07f724b6f9a9a0e2c84fdf6d8956fdd2bef94775b2ef707", "object_relation": "sha256", "Tag": [ { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293989, "uuid": "3f924981-d45d-442b-b59f-414fb7c7e89b", "value": "T13BD633A0A6E811FBF9EED33DC8619992C59635762B49C193D3F8C5A12C733C46A7E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293989, "uuid": "a0b51d06-97ae-4a80-b699-44a0aff9402b", "value": "dcaf48c1f10b0efa0a4472200f3850ed", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293989, "uuid": "024f3b6e-6180-4e87-ac78-568597f93bd5", "value": "196608:P14oWUoB9qLZBFslHl7dZgnRMWF3y99TisLkuornJ/urH/P/XRLSq2KKeF:P14FSsFl7dCR1C99/LkuM/uDX8W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772293989, "uuid": "851b9edc-47a3-42bd-8471-93f6b16a580c", "value": 13423887, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293989, "uuid": "808a21c6-5a46-4962-803a-146656e8056d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38f13dbe-1289-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772297349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "1e23d41c-747d-49d3-a512-68d27d336669", "comment": "Malware payload (Mirai)", "value": "f4436f7f9f5b5408e99f42bb696cdf2d", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "3b1ca18d-7505-4c65-9510-a895349def86", "comment": "Malware payload (Mirai)", "value": "f3b21a61d2524a83bbc2ca25f5745ba8a40cb30bf605f02f7c5b122b35a3de31", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "593a13fa-03a5-4058-a634-44f5c95c0a3a", "value": "T145D3D094F0809A73C3D522BAF74A264873631768D7EA3305A9258E3077D7A6B4F36D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "e86137b5-6d6f-491c-9399-01062269baf5", "value": "3072:7D0ownSrawpb01GEy8ojm4GYk3c2QR5dOYVlT:7xwSuw2dokGR5dOilT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772297349, "uuid": "a91a47cc-221c-4cdd-9493-26564ba55a20", "value": 142080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "93250b52-dd83-4568-aa8d-d963d1708ba2", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f187a4a-1286-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772297349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "70a3a176-d768-4a87-afc8-5e7cd0663267", "comment": "Malware payload (Mirai)", "value": "5a54dd8cb5b26d89775642a7359aa2a6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "950cfc70-aee5-42d8-afdc-c0369f03be07", "comment": "Malware payload (Mirai)", "value": "60d47512e0f10a98af2d01362cbc267bbf5d9f69e59fa688cb4bc87d5f865c69", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "4a6d4441-b0b2-45cb-856c-73116715f382", "value": "T1B8D3E169F480DA73C6E0117EFB5E124C732207A8D3D933559D148D2873EB96A8F3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "d6bdae4b-9ca0-4150-8cf2-e1509625bc9e", "value": "3072:rponhnSMawenirHi8BV6czGbUGe9fiVIwbazsFCJ3tCR62+6KpWY:rUhSjwenip6kGYV9KV7esFCJ3QRTuB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772297349, "uuid": "130bcc7e-0901-44d6-a35f-1dd9f7cc37bc", "value": 141446, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "c135f914-8b86-4845-85c5-6d711129793d", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d3934c8-125c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772297349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "c87a123e-0517-4aa5-8b3d-12c28951223c", "comment": "Malware payload (Mirai)", "value": "0e589742ddd2770af9d0bbc43e7810b9", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "96924e34-4223-4eed-a23b-89b82a652a84", "comment": "Malware payload (Mirai)", "value": "58e129292be4cf3fdafbc18e098b489fa88a517b557a6a78373a0802d0f44274", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "be557d6f-98fc-40c4-a8e8-c8e1d6f7d488", "value": "T187D3E1DAE8C0DB62C7D12A7BFA4D044973170769E2E9331389149F2927EB52F0E369", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "f7834bb8-1bd2-4b85-8c7f-9f6ddf4b6629", "value": "3072:foTTImvmBwUAySsK9oXTmZ/wxb/xQaJVDjQpfr4WkSk1pIKJ2hN8:fgIwWwUfooT9ZFNSTjYW42Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772297349, "uuid": "6d0a829e-95d6-42fc-8f75-fc06b942a69c", "value": 142204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "500eeaf6-5b54-45bc-8917-4283014beb4b", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "671f3254-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772297349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "e978ec63-263a-479e-9ea8-9f4625097189", "comment": "Malware payload (Gafgyt)", "value": "e291ecb0855c5ed97a9bee016ae7d480", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "ca2673fe-dc35-4332-b21c-ce486ff0fae4", "comment": "Malware payload (Gafgyt)", "value": "89d5d443cacdb0ee2ca35fc46362eb7194481eed12a69567861e1053744135f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "66f53f25-6dd5-4887-9fd0-f8936da97e4c", "value": "T1C5C3F146F88240B7F483917A444F938BBB31FF26510DDE63D744BB69AD332E618265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "c09053e5-4f06-4ff2-b730-5caba5c80e77", "value": "3072:qa3z5a9yc6DM41dVDTefX1d5LBLHucdraI1XY3zuxwcF2jTRh3SEoIse6:qqm10XdB6/LuoraI1XdmjrWN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772297349, "uuid": "d806c28b-6571-4851-938c-69d6e70cb7fd", "value": 127076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "90144d53-6417-485d-9178-a160cdd002e8", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "671f4ca5-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772297349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "d99c0388-139e-47a7-8042-368775f5c9d2", "comment": "Malware payload", "value": "c176045987d7370a72df8650b95d2463", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "2572aacb-2bf1-4b1e-8474-99cf68826ed3", "comment": "Malware payload", "value": "b5a52d2a9765c9985dd3df02b021c114a90c2142428a82666ea06cc0889e3b0f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "4335d8ba-92db-444b-b92b-9e15ee1608f7", "value": "T1F704F14777014F61C339D47105F38A92F7F613E51792A28AAB2CD805AFAA38C650FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "8f013cdd-c433-4ae7-a64c-0bc1d33fa742", "value": "3072:kgfKVeEOH4lcgjZxOp2FpYCAPqodFKDbPJwNxdn5c6xW5P4s9cRuoBVsf1V:kbNR1POpApntDTJwZn5Hsfj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772297349, "uuid": "d46e293c-31bd-4c05-bae4-750dc8189d73", "value": 180676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "36062f3a-3b69-44dd-bd3c-28773a5e5774", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "672f0f5e-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772297349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "0e1df9c5-7453-4301-bb10-f8298dfc7ab6", "comment": "Malware payload", "value": "f74ed8442b9e9062e08c2517b8ffd3bc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "f86c3efb-d290-4ee6-a2fd-119afcf47d1b", "comment": "Malware payload", "value": "ab358e2167c874c048d23c7d6ca3646f403b84c5321f56230d8362f36d98a146", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "b36a59e0-ed95-4a91-9b7a-a9f171e6a596", "value": "T17204F18AFE914F9FC42FDF70055F136755ED85DA8AE2632B827C8858B18C245CAE3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "086997de-1642-4880-a8a0-cd3fa20ef940", "value": "3072:oDTIzc663gm4FNsHXLBuf7T1VbKghIQtZfht7a2e/LqIP6qrh8zrI36ce:rzR63rcAwLNyQt17hwLbPZuzrae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772297349, "uuid": "68d02145-0607-42c1-8d84-1cebe21837a5", "value": 180213, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "bc195022-2ebd-429b-aaba-9dff4eb39c89", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "672f3fa3-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1772297349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "fd544040-d539-4c18-88a5-f2db2db32bb4", "comment": "Malware payload (Gafgyt)", "value": "52905d4184cac97c552844fcfe39472c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "90fe90d9-92bd-4ffb-b57e-df04a6796ec6", "comment": "Malware payload (Gafgyt)", "value": "4725da7cba1776e1e67297318988f98b222a338628e0eb3c4803df3012fb1f61", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "9773c4fa-21da-407e-8ee9-070a1d896e04", "value": "T1D3C3F185E5C2D7F1E28344BA105B9BB2AB30DE540048D6E7F79CBF21ACA2769D45F2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "2b1eb45a-95c9-4fd6-9a2d-5e1f8dcfdfbc", "value": "3072:qa3z5a9yc6D/gfAw0KS5CxHm8TUaGSAM5KuOF+TpPssYtq:qqm10BdKS81jX5bPMtq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772297349, "uuid": "b29e5982-d2c3-401e-9dfe-84f9ba99b313", "value": 127076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "f960352b-e828-40a4-a072-d1c2b936aab4", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "673ca126-14c5-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772297349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "64532154-d978-470b-9cf1-40c7858eb439", "comment": "Malware payload (Mirai)", "value": "85856518a225bcc13441328c656437f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "6d1033e1-9659-47e0-a609-88979acdf87b", "comment": "Malware payload (Mirai)", "value": "b1bb2b68a28ca28c0d31ced9558df53275a7afe97985dbf4d636c342f81ae12e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "554f12de-1d4d-4568-9d0f-1e2fa2b0bc2c", "value": "T106B3F262A791117DC58FC6BA0BB7E962F773B88477187B1E2245EA221F03F112B4D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "9c5801b2-4ece-49fd-9760-726e59ea5f99", "value": "1536:NovYbQVtiDor3zXQKfDBnGO5DdAUYjA6964ca8MaCtNNdQwx/e0nIAvjSGNdMo9p:Nov4QV8U9D9uR/akpxW0nj7SGfHxs/u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772297349, "uuid": "5ca3afc0-36db-4b4c-a84c-6e154b734bae", "value": 115529, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297349, "uuid": "9017d30d-cbae-45b8-95b8-3ba55d7461c6", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb491c3e-14c7-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772298430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772298430, "uuid": "1a78e0bc-e43d-4ac8-8c92-9fcd95d6b71f", "comment": "Malware payload (Mirai)", "value": "1f32880200db2b10f0c649086d95d025", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772298430, "uuid": "7f8803c7-4291-4e25-941b-70ebbab81d38", "comment": "Malware payload (Mirai)", "value": "25d1cfe16ffa3f9107b5aa906fa23123a0e3035747cf8a070f83a9597b05147e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772298430, "uuid": "247628e3-53f6-4f23-b587-194f579602de", "value": "T1DF133AC1A643D1F2EC5212F5147B67628F76E4364A7DFA92EBA92531FC03B10960B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772298430, "uuid": "e794349b-1bf2-4fae-9beb-800138166648", "value": "768:QQaiSup66OkEgy5oD5YQuj4JsUTeU4wQOnsspVI/4bOGd7nX:QQaiSuptOkEX6D5YQ/JsUeUDtsspDbOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772298430, "uuid": "cf7b1e0f-8dd3-4274-94f4-c6c30e09bfc9", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772298430, "uuid": "5f295149-73ff-4139-b98e-c2159805c0f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bdbbd53-14cb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772299988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299988, "uuid": "2201c748-3539-4422-b514-d8220a57926b", "comment": "Malware payload", "value": "1e109f7d2ba7bd13c2e2ea37966a536b", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299988, "uuid": "b33bbe39-9103-492b-ae4e-a62038484f49", "comment": "Malware payload", "value": "400580cd4ffbf617358703200b5b2f50d272e1b7515b599c5ca765f66025321c", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299988, "uuid": "56359730-70b5-47b8-ae00-2aee78d623fe", "value": "T175E228B6F4E3AA7CCD769BE09436CDD8DD3808E992D2A85CFC12557C22277136C0DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299988, "uuid": "691fd6f5-31fb-4bfa-9082-398a2660e846", "value": "384:Q6ZGokNGNukdVlaCD2E71vMRl/PLaVQGB6dy0vxAa8L4i9Bdvj+p6NS7jAj5XFkd:9WYRVQ7pd1xjm4i9Bh+pm4j72Pjy+Yh9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772299988, "uuid": "419a3fdc-c529-43a7-a544-0a3d54db34b4", "value": 32816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299988, "uuid": "286336e6-fe42-4a4d-b100-ec63bf2ab6a7", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8bec169d-14cb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772299988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299988, "uuid": "0d021d61-3f61-4170-8ab2-b1b591c485b8", "comment": "Malware payload", "value": "3339cc4b7aee45f19fe17cd5736b19d0", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299988, "uuid": "3b5afe45-1a0c-43aa-b3a8-9669964194f4", "comment": "Malware payload", "value": "b855606e63bc98b0a0fe8514df428742e3161945582b53e0ac363ae76e0eaf54", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299988, "uuid": "3d1c770d-f5ba-4bab-8629-e7e397cc6830", "value": "T1B5229C3D9E35F8C043BD71D09A622E5720959B13DB724A7CE9461CEA1C28249EF3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299988, "uuid": "2e975f27-f854-4b07-aed6-d134657d89ee", "value": "192:lI1ITpZAl37YtW6z4QJ3IUiUk2hQ3DUNU4B4GA1pikCSldQhidiGZZfZ1vdq9kn:lI1IVZAx8Wk4QWhp2huuXB4GA1IkCqd3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772299988, "uuid": "8e5b798c-adc3-496c-886b-b66297929b09", "value": 10169, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299988, "uuid": "32a7139a-aab8-4c78-abb1-9b2c4a41fd8a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d147db8-14cb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772299990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299990, "uuid": "b2092c30-97ca-4a92-a3e3-946ee0b4fc55", "comment": "Malware payload", "value": "ccc44c1e5c018c00b8c05abbd1b87a1a", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299990, "uuid": "9119bdf2-5154-441d-8b9b-e1a5912aa060", "comment": "Malware payload", "value": "39775ffb3300bf04d565e9640a4555aae605d96eecef903f0c66203aa23ce2dd", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299990, "uuid": "12accacf-ed89-402c-ad29-673875cb76ce", "value": "T174177B47F8A109E9C5D9D630C97692137BB17C484B3223D72B60B6786F76BE06EB93", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299990, "uuid": "f7fa19d2-582a-4155-b4ec-5eebf3b85eba", "value": "196608:AXkwbjVrPhTCeDnBiUo7oD2sglBciLTemtIwXi4mPB1LfmsSg:AUwbRrRZnB/o7oD2sgHL6mtI60Pbesj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772299990, "uuid": "209c19ce-a74f-4edc-a152-cc2f3b623f99", "value": 19460724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299990, "uuid": "75e46f86-077a-4af2-bf91-dc83d1efbec9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8da34531-14cb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772299991, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299991, "uuid": "db1211be-0455-4913-8b53-ea16effeb633", "comment": "Malware payload", "value": "474571db2caa9ca18d6117e7cae61ddd", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299991, "uuid": "5d02cd6c-61c9-4719-ba14-3bce8daf14c3", "comment": "Malware payload", "value": "ad1570a88b3405570ff11a8b8349921a67ed066595c86bf00a79b16d471d9b95", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299991, "uuid": "ed66c989-57fc-4f6b-8db1-2346e305d8e5", "value": "T10AC6336434E08361BE73C3B4F71CAD6A861598653EFE832E9068961135B17EAD9CF2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299991, "uuid": "35a9c7f9-3981-405a-b344-76aca1412757", "value": "196608:nTHvoR2txqSWLAYgfjLVIaf0a3/giWHu7EVoo5KawY7BfiizNqbMHX+Fnjxv+tRu:TU2CS4Arjyaf0a3/s0EVoQKaD7BBZqbB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772299991, "uuid": "407a0eaf-679e-4af4-9f49-7efcd8e4b6bf", "value": 12364893, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299991, "uuid": "3f934934-940f-4dca-9305-c666ec88779c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f15c57eb-14cc-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772300588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300588, "uuid": "d1bcd9a3-9f4e-4d5f-998a-7286e9340216", "comment": "Malware payload", "value": "c0ce766ed536a2b248457096c44dc699", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300588, "uuid": "18594d0c-9d34-4571-bec0-11ef5ed7c885", "comment": "Malware payload", "value": "c5378b4cb6687ab8fba6d19e6f690c9d168bc36e351279954795fabeeec5789b", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300588, "uuid": "608d69b1-01d4-4599-8aa3-ce932a72078b", "value": "T11DA53345236F058DDB6B0932347832612B7DB85EFDA9D3DE2A8075E2098FB4503CB7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300588, "uuid": "a3da00ab-5c8f-4e84-8155-b8ebae05db85", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300588, "uuid": "2fba96b0-99ab-44cc-a3a9-b0f246df687b", "value": "49152:OkqXfd+/9AqbXHeW/02D4lC5ioHDgtduJvYPwdUKrKXI+jfltdli9dHqUdc8Z:OkqXf0FfbXHRUlC0lz4vYPwdUSKXI+zg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772300588, "uuid": "4908a976-cfb5-41ef-9b1a-b73f4d09e6a0", "value": 2105856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300588, "uuid": "df855d7f-83c2-4d34-8f21-2c93f3097a3c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f15c7d39-14cc-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772300588, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300588, "uuid": "c29aa1a6-96ba-4325-be42-f8f92e0e403f", "comment": "Malware payload", "value": "ab8bbad9dc9188104deb3aa34d65dd35", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300588, "uuid": "c9f83681-241e-4121-8896-35e1ae397089", "comment": "Malware payload", "value": "e389a505640f3e7b88aebb9ab48ab964585f3f88a8b49e6648247c2e6a19be36", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300588, "uuid": "a4405b3a-f88c-4ca9-8347-49bc9843948e", "value": "T1329533FF5221BE0D6D8253AAC11977ED49F3434C44FF650B7472085800FA9ECDBA66", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300588, "uuid": "20d183df-0e15-4b67-8628-95f1af9c9a3a", "value": "49152:tSmVUWoxPkU7hS1ILePbCLpgLcPzJx/IdjvMBsP:tSm+Vbh5MbGJxgdLMBU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772300588, "uuid": "39c90c80-eee9-4744-98a4-b9b41c22c333", "value": 2057902, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300588, "uuid": "0f1c51ca-791c-4f33-8e61-6117c1459713", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59d7e19e-14ce-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772301193, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301193, "uuid": "9a327c72-33f4-4ab7-a889-4953bc2a9fba", "comment": "Malware payload", "value": "52eb2a3240e31d9261cc6993dae0983e", "object_relation": "md5", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301193, "uuid": "b3f55227-e778-4fa8-b6ae-6b1ee444966c", "comment": "Malware payload", "value": "904f23c0c46e948fa53279d9eb4a8c555ffacc6040780d9d35a31d2cd98780df", "object_relation": "sha256", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772301193, "uuid": "712dd406-afa0-4dd8-8df1-3e9cceaeaf03", "value": "T1915124105BFA0314F2F38B76ACBBAAA54C77BC56EE51CB8D0150414E18B2A10E576F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772301193, "uuid": "9bf16eae-c874-41f8-a56b-0ef0054a15f5", "value": "48:835azVupRxbAFqhj3SynY07iqsd2hbxdLXuHXRqM:835BxbAYr+eiWbHu3L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772301193, "uuid": "0282e458-d41d-4920-a54f-1a41e6fabb0d", "value": 2634, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772301193, "uuid": "69bc8dce-f172-435e-9ced-f93eddd1c542", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f58a9e05-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "5480315f-bd63-463b-a23e-b7473848a699", "comment": "Malware payload (Mirai)", "value": "79e07128a1f9e03a394e9f7117e46028", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f5330f5a-65fa-477a-bcc6-03cf9db8c667", "comment": "Malware payload (Mirai)", "value": "e1a2b8cba265c6141876894e32114362775f90b20d23419fdfb49dda52734cb6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "2ba8af71-369d-465d-805b-4536ea2344a0", "value": "T1AE039E53C93A2D94C63985B4F8219B7E2B53E949A5936FD6D826C274C003F9CFC2D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "90236590-c86a-41d8-997f-bc854f3c0a05", "value": "768:iTUc2eBs3+EuYG6TKjj53iGP/AEF9AKblZ3ay3VJ5egoS6VnYUvC5YMy3:4D3BsOEw51LFQS2rCje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "9c45a206-3a05-4f80-a6ad-4d55b5b1a78e", "value": 39908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "74d8a319-e0e6-4025-a1bc-0ca5b649ab12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f58bec60-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "fc45cc62-3bc3-49bf-ba7a-c82d9f8ddfb1", "comment": "Malware payload (Mirai)", "value": "152120545eee85e6120ab838886bab7c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "80ffdaa3-1d56-4a7e-80f1-e3ae6566057e", "comment": "Malware payload (Mirai)", "value": "54a790f11f64b2f4a0649f61acd006cefe63147c6d4c122bcbe732fa4c49e320", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "cd757cf1-18e6-460d-aeea-851fcb669651", "value": "T14C53941A2A258FADF76C873487B74E229799379727E1C644D15CEE001F7038E641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "5e12fcd7-1474-4259-b4f6-ddf58ffa2807", "value": "1536:dMBsSfxI6HdeKImzB1M156Bc2ueZqf3J3J9:afHHdeKFB14eZEZZ9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "77c3d784-9c8d-444b-a985-919388a03875", "value": 63660, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "8636f59f-d77f-416b-83dd-f119da3655c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f595ca91-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "732071f0-4d0b-415d-9302-62b64c4aff91", "comment": "Malware payload (Mirai)", "value": "481a42832dfe5aeab7075f492f945ea5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "126d2cb1-62c4-4aec-aa4e-6f1d54da454c", "comment": "Malware payload (Mirai)", "value": "7613e59aedf718abda262f76e5aa877ccf983a4a1b1308df13d40188664a06e4", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "b8021ba7-3d7c-4223-a6c7-0698313a5875", "value": "T10A333A35B6752A1BC8D8987D22F74328B2F4168E28F8CB1F7D720E4EBF6085025176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "e1fa2234-6622-4f17-968b-a4f3e8ca2ce7", "value": "768:vj72UF999I26p/d1DNwm+BK4HpX2KlNhdtBBY/hju/QJwO+351TSOj:v3pF1IDp/nNwDBK4HpmKlzB+/IQJa3e8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "6cd6bded-72be-4b7f-b6e6-34ff56a3cbca", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "9c1d3cf4-6f32-4d93-b6ca-29bc5b89591e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f597b14c-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "ed6bca0b-6b28-4000-8d4b-0309df247d05", "comment": "Malware payload (Mirai)", "value": "9f18ea2a96d0678397046fa2bdca64de", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "24d46567-97d9-4966-94c8-7dfe426f70b5", "comment": "Malware payload (Mirai)", "value": "0788c1c249cb3ed3c96f76062f1bfe0091899b3bef78160eb55a8c8014ab4f0e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "13d57487-0811-40ad-955b-a5edaadbcb00", "value": "T1D6231894B9829A16CAD0437BFE0E42DD3725A398E2DE3313DD221F6137CB92B0DA71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "8732e194-73b4-4eb0-aa28-dbb745cca780", "value": "768:UXYesyi5wPVQEkJVvOwxPFV4iRu6Jj3oSCo6gPj5+uB4Pl5Q1AL0xkbUFqBgEk9H:VZe4vrR476JdzPj5+uBalulObUoBEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "e34b97c8-9f2c-46b3-9d18-bcb0a119849f", "value": 47940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "159d2ab4-7999-404d-89af-3b693c7f3f71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f597f3b7-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "1fa5b9ab-e675-4ba5-a9b0-6616882637c7", "comment": "Malware payload (Mirai)", "value": "1f8c42412dc409899a1e015cd4ee8b21", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f5052958-7712-4191-8082-df4d5f825c44", "comment": "Malware payload (Mirai)", "value": "e55e5a3a4e133e342404e45087abc9bc2220a17dc3e23ed30b940f0994d3fe00", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "c2ed3cb7-6b76-4b62-b791-e81b2a40a970", "value": "T1D553831AAF650FFBEC6BCD3745A91B49349C640A12E93B367934C818BA5B20F45E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "9bf61e28-3d44-4d51-a528-4bdfb2ed932b", "value": "1536:yGtQ8AKyjOz8lI3DXUAFXMSL3bKL2LZgsF8qD:yM6KyazQqDUBL2LB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "1397d708-e4a0-473f-b5b2-e116cf77ade5", "value": 64380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "22b03b2b-d672-4a89-a1c1-d0f62a1ebd86", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f59b80fb-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "2a154e40-7f36-4370-9477-a0880cb729e0", "comment": "Malware payload (Mirai)", "value": "587acc6befe949c61153254849061017", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "e5a0840b-dd8c-4a38-8e3f-18e6723cec2b", "comment": "Malware payload (Mirai)", "value": "52817af1b60452736b419cfc629f3e2c493ca07b952093c0817be6f118dbabf1", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "1429915f-9864-44d5-9ad8-1a76a529a8a4", "value": "T182133A92B400AD7DF85EE73EC093090AF131A79551821A3763A3FD776C322A85E76E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "dab6027c-636e-46bf-b251-0043c9430a4c", "value": "768:0xqFTD4t0MoBjFwWEw0Cmk+3o+6WluD811JtTRHGtHwl5bsW71:COaWV2WLHVk6WkD811bRHGtwlXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "9d2559a2-a25e-4bfe-b3d1-7164f821dccf", "value": 45516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "d945010f-3b76-4ba6-b66d-22e889585581", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f59ba5b9-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "9671ace4-b9ec-4e22-bb14-7320dce009fd", "comment": "Malware payload (Mirai)", "value": "509e7114d45ffbdd999a8e2257cb4f4a", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "cdb89fc4-c378-4f37-86e9-e624a7583ca7", "comment": "Malware payload (Mirai)", "value": "31af34400c260dbb02de00f976709cce410de17dbc66123cfb11f42f4a3beb08", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "d0735c16-dfe8-4dc8-a4c8-4958e63f02bf", "value": "T1CF2329035491C0FDC955C270AB3FA636C922F47E123AB59D73E0BE226E4AE311F5A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "725d0f56-a505-4e19-b53d-80bf693d1276", "value": "768:FkrR8ysZAY+OGZZRw4xywPtKOojvHjKRDACGyjltp4B6gC:6d8y2+OOpyrDckCGyp4B6gC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "f4171f1c-6ab7-4e4b-8ef7-373fee8362df", "value": 46400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "bfd8cac7-cddb-4fb6-8391-d597614ddcfc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f59d9007-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "16f56d63-b672-48dc-af64-f272e60bab96", "comment": "Malware payload (Mirai)", "value": "4f686c9ce5be3f9bfd5cf40bb892c4a0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "e4bbbae5-87c6-484d-8295-682728995e78", "comment": "Malware payload (Mirai)", "value": "866d8cddd8d042426e7f9779ccf880cb1da36201adecb85d8ff674fa300cee89", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "afe8e92f-fb06-445f-8a8b-079e83d47ced", "value": "T182131742B3180547D1631EB0353F47E1E7ABAE8122E4F288760F9B4DC171E77A946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "348d0cda-28d8-4a1f-812a-a501ac40891f", "value": "768:TuZQBal6xzFogyxBvDMLccDP1UqI9XFPTMGy6/janpyvsM73V+Otauo:T0UFogW5DML3DyqWPwGy3nYx73V+uaD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "9a2054bb-26c1-4531-b1ee-fceead4647f7", "value": 44168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "eac44a62-ac41-485e-8b90-f6c83ccc7cf7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f59fb9bb-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "4458c6ba-d7ed-4c00-ad98-539ad95092ca", "comment": "Malware payload (Mirai)", "value": "4364910e528330572edc0b3381c1165c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "4c1aa3c9-7fad-4988-8c36-4cf3187d781f", "comment": "Malware payload (Mirai)", "value": "c406e9185645c7a40319fabc9b021021a9acffb2ec23253ec38f161be4fc1d20", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "4781ba06-53c5-4404-9fcc-289bde3f427f", "value": "T1123319B51516F2BCE9E22078F40720F529530A1C3ADCE2D3B0930579FFB5B48B96AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "c10d13a9-830d-443c-9296-4693a3ca8e61", "value": "768:zMClhMqB0yBuKw3GoACzQyZRtlkABYxQ5TUnRNww31:zF0vZ2oR9DtlksYicks1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "a2d7e9eb-e466-4b67-8c45-3804bf91f843", "value": 50632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "ae4a772b-3c96-4264-b29e-40d033bbf2b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5a1112c-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "6d34d67a-c611-4fc3-b1b8-47ba648f082e", "comment": "Malware payload (Mirai)", "value": "4dda99d136605936c269ef9edbbf47d0", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "a076c9f0-891f-4b03-bbae-550cf352b657", "comment": "Malware payload (Mirai)", "value": "c9f1e6d5cb31e4efd65a5a3680df0badfda61bb4646c1af0ded9b9e13836c47b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "569e7548-bd58-4987-9716-feb41efd6b72", "value": "T126233A49C703C1F0D8861570507BAB7AAE7AAC325570ED5BEB983A26BC32B11950B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "3e947928-95f3-4d0b-bffe-d4453050ec08", "value": "768:sXK15wniDa6PO5+m0h5phjhrJzm3W/NqNl1UJwlAscucuN7iKlkH1GsPK9K:sXK1KIfPk+m0rhom/a9cu5CGsiE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "702d4b86-a916-4ba5-b509-e1be7be19d94", "value": 45728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "bd16b03b-3fd0-4259-88b8-6591edcb676f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5a35111-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "386f2b24-78fd-4227-a5fa-6de62ea8c0d7", "comment": "Malware payload (Mirai)", "value": "16e9891257e939a0d113edb2a5134664", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "5cb1ec26-84b4-4276-8b0d-811b7f971b1f", "comment": "Malware payload (Mirai)", "value": "a5d3b14ed9482a0c4947dcbcc206c40cee0ceddd0e80985a4be045eaf2fab7c6", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "e278f210-33f3-4bb5-ac5f-fce98a2d88a9", "value": "T1951349C59A43C0F1EC1112F11077AB519F72A436AA79FB47E7A93A32FC02B1196173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "40261481-70e3-4976-97d4-58b0390507ff", "value": "768:x73jOIDzzrq7WiEu+RiUjre0Ex63a7x2oq1z7yvEdTpKMxn:FjOAzwvEuP4a0EgwzkWItKKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "0f068a6f-f914-4c18-90f4-9ae4ca752411", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "6feb059e-d537-432f-9d6c-4dc632d68748", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f5a72108-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1772303172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "6f54c12d-f16a-42ab-8961-f4891590ff2d", "comment": "Malware payload", "value": "2ffa916b30b0079ffa98b409ed096f08", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "9f015826-4253-4cee-9567-2a011fa5cd35", "comment": "Malware payload", "value": "8b9ea0ab6d318a0bf0e90a2d12c9b2a23d3f242f1b081464e4721fbc12b1ec11", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "b8e5f69b-c3ee-47d5-b01a-ead3f44efee6", "value": "T1A55104CA13934371ACA1DE7BB2F50945B5B1A08B74C59D58A8EC38F492CCD4A7DC5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "c47edd78-5f4d-4dc2-b156-f4de762ae091", "value": "24:IthSFLYnSER2UFAL4n4o1cTfkNfiuL4eTpaOXgGZ4dvo:ihSFL4SEA6A2cTfkfiA4AaGZ4g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772303172, "uuid": "3f7c0ff3-fa6c-438a-966b-427ff98da237", "value": 2479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303172, "uuid": "4bdb422d-96a6-453d-9130-d208be8b1e0f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1772304620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304620, "uuid": "33af3c10-af04-4b0a-bfa3-e9168c0d6eba", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304620, "uuid": "62f3a167-b50d-49f0-8b90-0d51ecb55713", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304620, "uuid": "deff983a-1491-49a6-b94f-8591f6cc0887", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304620, "uuid": "4dde4a29-7565-4d1f-b527-948ea8331e94", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772304620, "uuid": "6d3f7ce6-d132-419e-839a-ff1c4e9f93d7", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304620, "uuid": "75d3134e-364d-456f-aa1f-2d31bafe787d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304620, "uuid": "19582bee-c295-49ef-a1e7-0f1ae49b7dd7", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1772304620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304620, "uuid": "53b7a678-e32e-4d2b-aef6-ed75eae677fe", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304620, "uuid": "f81e719b-8b8c-4111-a177-a15491968fcc", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304620, "uuid": "99c228f4-edc1-4b59-9704-cd611387f632", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304620, "uuid": "af8bf768-3482-4f5f-8d84-589bcf6263b9", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772304620, "uuid": "c4289f92-2b16-4d91-8778-5a39e973d779", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304620, "uuid": "d6abb668-e5b3-4ba4-b379-c73c280d69b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304620, "uuid": "7d0b9057-0989-4d27-bef0-2fd290a230ba", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b818e3d8-14d6-11f1-8369-82aee05be84a", "comment": "Malware payload (WallStealer)", "timestamp": 1772304786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304786, "uuid": "86e516b2-cf74-4e39-ba0e-362768508f8d", "comment": "Malware payload (WallStealer)", "value": "e76586ffea5c92002e4a8edf60b64bfe", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304786, "uuid": "46feff13-2b4f-454d-be4a-e615d254d27c", "comment": "Malware payload (WallStealer)", "value": "0d5b21c50ace8394dd64e9be86a4187362e6fe07af4be39ea5ed8c1d6fe937d0", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304786, "uuid": "571f5874-48d2-45d4-920d-04cc4dd0189e", "value": "T112D47B0DA7A581F9D1B7D0B4CD038517EB72FC564732669B43E04A862F2BAA49F3DB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304786, "uuid": "0aa7309e-7062-4ae2-9c8b-87e053d963ad", "value": "a330d858063c312aaac6d9eaeb29a36b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304786, "uuid": "2af48be3-661c-4280-ac3d-f0872c6a8f69", "value": "6144:6/FAnFeGb74gQ/Dmeqxt8UDRiiVxdB8+CbTrK9ZgnRs1VzYXWjPJAWzfO6rn:WA0sJQ/Zqb8RaxXaYQRkVkUTHrn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772304786, "uuid": "719188ae-ea4b-4f54-baa4-80f53de13a93", "value": 649216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304786, "uuid": "a61b462d-2c0d-49a8-b80f-19dff08e1461", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21533633-14db-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1772306681, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772306681, "uuid": "058869d9-9b26-4cd0-9b51-688b3ac39df2", "comment": "Malware payload (Mirai)", "value": "f716829048af27364b3d44e85c351388", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772306681, "uuid": "9b5f9812-035e-4521-a595-d134411d2c5b", "comment": "Malware payload (Mirai)", "value": "24d4f12d88d5d787dffe22d0fb215e00e5f23ae9c9e6702d7aa4da518f93a2f1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772306681, "uuid": "ccc70fe2-3e30-428a-90f1-cb9a06954857", "value": "T1F081F949725207A43E68EA22D37FCA185B42D4DFD4D21F89F2EE6AE04D8DCC83D541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772306681, "uuid": "d16e5b5d-a064-4f0f-b3eb-69587028645b", "value": "48:vMUlUIblUIUMEUcUhUHUSUbUyU2UXUzUBn:vMUlUmUIUMEUcUhUHUSUbUyU2UXUzUBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772306681, "uuid": "af3f7691-5bf7-4c79-b72a-ea785aa903e9", "value": 4080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772306681, "uuid": "dd20d232-b8c6-440f-bc1a-e4586b56e11a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d1a5927-14dc-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1772307103, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307103, "uuid": "4c0cc2ab-adcf-4f81-948c-a61998e5bc08", "comment": "Malware payload (CoinMiner)", "value": "3ba46e2ecf558aad2d753cd579cc02b0", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307103, "uuid": "6a93e3e8-111c-4fba-8eea-719e5f49fa5b", "comment": "Malware payload (CoinMiner)", "value": "1bf36dcb96c903a5bdb01914e3e775bf1a39dcff294a3e23842d337b62d3c7c0", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1772307103, "uuid": "b0480f78-1a24-41ed-b9b9-7230955ab7d1", "value": "T1AD251211B4C1D0B2D036243509F5C6B5A93EBD724B2686DBA3A83B755F303D12376A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1772307103, "uuid": "7943b8a2-6ceb-490b-a9ad-1251cf58aa2f", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1772307103, "uuid": "772e1890-d155-4024-95e7-64983be304e5", "value": "24576:R3oCTWeZTfxnW9yFdNM+lu8n5bpGLIe1hdp1YdGrksfC3r:R3XTWsTBDNQ2iselXOr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1772307103, "uuid": "629b4fea-a4c3-4d4e-bb54-75c54a9be20f", "value": 1011376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1772307103, "uuid": "3121e30e-eb86-406d-83d1-39256318bb0f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772236996, "uuid": "e18e5335-1438-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.186.139:50346/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772237063, "uuid": "0a0f0a2d-1439-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.140.217:55573/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238071, "uuid": "627c158c-143b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.171.147:51001/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238139, "uuid": "8b0d878b-143b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.186.115:41491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238189, "uuid": "a8a69844-143b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.44.160:32817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238381, "uuid": "1b8345c8-143c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.44.160:32817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238557, "uuid": "83fa702e-143c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.201.15:46464/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238620, "uuid": "a9c1dd94-143c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.76:41944/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238729, "uuid": "eade3af3-143c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.4.125:34265/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772238915, "uuid": "59d31a1f-143d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.171.147:51001/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772239086, "uuid": "bf80d6c4-143d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6741217448/2ypTlLw.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772239152, "uuid": "e72c6daa-143d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.192.90:34444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772239219, "uuid": "0edbc8e8-143e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.190.54:58426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772240616, "uuid": "4f71b68d-1441-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.7.37:44808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772240778, "uuid": "aff1ff69-1441-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.192.90:34444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772240790, "uuid": "b779ecc0-1441-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.86.76:41944/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772240949, "uuid": "162e0bc3-1442-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.190.54:58426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772241138, "uuid": "86be9a8a-1442-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.239.117:45983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772241804, "uuid": "1358a481-1444-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.144.153:50676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772241969, "uuid": "76279529-1444-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.207.169.188:50268/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772241986, "uuid": "805d74e3-1444-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.47.47:47630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242044, "uuid": "a27e8c39-1444-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.78.58:53328/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242103, "uuid": "c5ca8cc7-1444-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.199.214:52172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242162, "uuid": "e93c8fa5-1444-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.226.7.37:44808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242343, "uuid": "54e907cd-1445-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.78.58:53328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242461, "uuid": "9b044d9c-1445-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.199.214:52172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242568, "uuid": "db372af4-1445-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/yutangru1114/hwidtool/refs/heads/main/src/Software_1.9-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242568, "uuid": "db485934-1445-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/yutangru1114/hwidtool/raw/refs/heads/main/src/Software_1.9-beta.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242584, "uuid": "e4ac63f8-1445-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.201.246:44715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242644, "uuid": "089b9403-1446-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.40:58250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772242869, "uuid": "8e5d7cec-1446-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/IronTraderKnow/World-of-Tanks/raw/refs/heads/main/Loader.zip", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244398, "uuid": "1de0edb4-144a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.29.40:58250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244804, "uuid": "0faee30e-144b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.91.157:59114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244908, "uuid": "4d9812e7-144b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/meneater69/R6-Recoil-Reducer/refs/heads/main/poncelet/Recoil-Reducer-v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772244913, "uuid": "50ac5eff-144b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/meneater69/R6-Recoil-Reducer/raw/refs/heads/main/poncelet/Recoil-Reducer-v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245273, "uuid": "278afab1-144c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.254.51:35467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245808, "uuid": "6617314b-144d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ventira.digital/cgi-bin/ORVX-QFmegG.php?pass=KDX9KhkBFj/build.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245820, "uuid": "6d4e567b-144d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DreamBursarStretch9/Battlefield-6/releases/download/Latest/Azuro.zip", "Tag": [ { "name": "pw-azuro", "colour": "#8789c7", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772245885, "uuid": "94293b2a-144d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.90.149.231:34810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246423, "uuid": "d4dd4928-144e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.57.46:53635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246478, "uuid": "f5a281f6-144e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.91.157:59114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246479, "uuid": "f63b5d15-144e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.69.107:41442/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246593, "uuid": "39f4e586-144f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.57.46:53635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246723, "uuid": "87cc0d33-144f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.186.59:32873/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246950, "uuid": "0ee5b416-1450-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://vinievent.com/venv/build.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772246965, "uuid": "17cc119b-1450-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.254.51:35467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247193, "uuid": "9fd1c13c-1450-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.178.227:50061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247201, "uuid": "a48fc2ee-1450-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.186.59:32873/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247793, "uuid": "05983703-1452-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.69.107:41442/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772247972, "uuid": "6fce9036-1452-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.239.117:45983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772248876, "uuid": "8ae0cb2a-1454-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.223:56097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772249244, "uuid": "666ab58b-1455-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:9571/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772249291, "uuid": "827f09e7-1455-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.166:44072/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772249899, "uuid": "ec7b331f-1456-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:54386/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250069, "uuid": "522bfc49-1457-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.58:50454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250259, "uuid": "c337a612-1457-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.154.188:54111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250381, "uuid": "0c214ace-1458-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.2.228:42360/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250436, "uuid": "2c932f1f-1458-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.223:56097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250489, "uuid": "4c8d4bee-1458-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.243.115:54410/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250610, "uuid": "94a800d5-1458-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.152.166:44072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250732, "uuid": "dd42b37a-1458-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:55442/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772250979, "uuid": "70561b3a-1459-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.37.77:41339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772251034, "uuid": "915beea7-1459-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.186.139:50346/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772251035, "uuid": "91a6bcad-1459-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.248.233:43757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772251093, "uuid": "b4239bad-1459-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.230:60281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772251812, "uuid": "610b4bf9-145b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.132.121:38000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772251817, "uuid": "64097b07-145b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:54386/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772251878, "uuid": "880f67a6-145b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.136.58:50454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772251929, "uuid": "a696c891-145b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.2.228:42360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772251995, "uuid": "ce3ba82a-145b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.243.115:54410/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772251997, "uuid": "cee6246e-145b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.105.155:38714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772252539, "uuid": "11f7b4fa-145d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.118.255:36840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772252591, "uuid": "30ec3f90-145d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.50:43979/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772252591, "uuid": "30f163ca-145d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.248.233:43757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772252778, "uuid": "a0aeca0c-145d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.132.121:38000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772252844, "uuid": "c7ecebf5-145d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.77.230:60281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772253137, "uuid": "7699918c-145e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:48704/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772253138, "uuid": "7709fc1b-145e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.6.178:45885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772253677, "uuid": "b87d272d-145f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.117.187:40534/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772253849, "uuid": "1eeb9654-1460-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:57805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772254096, "uuid": "b23b7a75-1460-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.83.77:55385/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772254331, "uuid": "3e66b361-1461-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.224.131:44961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772254458, "uuid": "8a066d7c-1461-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.232:52764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772254520, "uuid": "aedfc4e1-1461-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.6.178:45885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772254576, "uuid": "d067abbb-1461-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:48704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772254877, "uuid": "83ad8cba-1462-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.70.50:43979/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772255418, "uuid": "c61d085f-1463-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:37705/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772255541, "uuid": "0f6e7393-1464-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.35.186:57752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772255541, "uuid": "0f6e8a1a-1464-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.132.232:52764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772255722, "uuid": "7b61c09a-1464-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.143.20:46072/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772255948, "uuid": "0268a2f1-1465-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.234:57805/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772256438, "uuid": "266c085d-1466-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.23.98:53890/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772256546, "uuid": "66d551c8-1466-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.dropbox.com/scl/fi/iyy202v7rsn2f9upgl9w3/PlaySoft.zip?rlkey=qfgsh8iwvt1jm2r185fk1uo8f&st=qggmslxr&dl=1", "Tag": [ { "name": "pw-playsoft", "colour": "#374f60", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772256669, "uuid": "aff2adc0-1466-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.65.23:40387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772256977, "uuid": "67307f85-1467-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.55.41:55477/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772257277, "uuid": "1a3d20bb-1468-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.21.50:47856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772257338, "uuid": "3e98926b-1468-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.83.79:59423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772258048, "uuid": "e5eff43a-1469-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.23.98:53890/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772258227, "uuid": "505d7061-146a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.55.41:55477/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772258420, "uuid": "c3b8d132-146a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.177.237.148:37727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772258540, "uuid": "0b180f96-146b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.66.71:34701/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772258779, "uuid": "997ba64d-146b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.246.84:54693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772258779, "uuid": "9981c72f-146b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.242.65:55157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772258893, "uuid": "dd425266-146b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.21.50:47856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772259017, "uuid": "27aa16b7-146c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.221.163:50438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772259196, "uuid": "9236c01a-146c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.58.82:57393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772259309, "uuid": "d584dead-146c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:10442/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772259735, "uuid": "d356c6c1-146d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.103.0.149:54881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772260942, "uuid": "a2bcd726-1470-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.66.71:34701/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772261059, "uuid": "e883efc6-1470-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.14.82:36179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772261118, "uuid": "0bc4ea08-1471-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.162:33619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772261420, "uuid": "bf7d431e-1471-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.160.130:59674/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772261477, "uuid": "e1bd9be3-1471-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.58.82:57393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772261527, "uuid": "ff67f77c-1471-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.17.80:46983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772261657, "uuid": "4d10ec7a-1472-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.17.80:46983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772262747, "uuid": "d6ded5eb-1474-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.49.77:34912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772262979, "uuid": "60b6bed1-1475-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.161.160.130:59674/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263522, "uuid": "a44b6a09-1476-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.223.96:37336/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263761, "uuid": "32c6c2df-1477-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.149:52538/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263883, "uuid": "7bdb5b17-1477-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.242.126:43397/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263988, "uuid": "ba7a3b70-1477-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://carrier-packets-docs.com/FREEDOM_FREIGHT_SERVICES_CARRIERS_ONBOARDING.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772263993, "uuid": "bd60b17b-1477-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://qto12q.top/pdf.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264001, "uuid": "c1f4db20-1477-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:49646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264062, "uuid": "e6710dae-1477-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://electroboob.com/g?i=1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264087, "uuid": "f58171a9-1477-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://download.x64-google.cn/Chorme_Setup_1858_1.9.zip", "Tag": [ { "name": "Malgent", "colour": "#a071f9", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264254, "uuid": "58b561ee-1478-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.252.201:59712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264425, "uuid": "bee7819e-1478-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.49.77:34912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264467, "uuid": "d79d9271-1478-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.13.208.135/files/loader/2.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264468, "uuid": "d824b82a-1478-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.13.208.135/files/loader/cvmegafull.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264468, "uuid": "d8384c64-1478-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.13.208.135/files/loader/tunn.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772264477, "uuid": "dda80007-1478-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.13.208.135/files/loader/OnoMiner_obfus.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772265083, "uuid": "474b6197-147a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.223.96:37336/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772265143, "uuid": "6ab5f41c-147a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.197.49:40476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772265500, "uuid": "3fadc0d4-147b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:49646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772265744, "uuid": "d0c881dc-147b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.252.201:59712/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772265983, "uuid": "5f9063c9-147c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.242.126:43397/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266087, "uuid": "9d356211-147c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://95zxw7vw.opticprime.digital/?=check&&actmn=rufFmwLCMcraKwPc", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266284, "uuid": "130729f6-147d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.184.136:49426/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266473, "uuid": "83591e7b-147d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.92.206.68:42301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266585, "uuid": "c60de2ba-147d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.184.136:49426/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266655, "uuid": "efb64aad-147d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.15.149:52538/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266824, "uuid": "546d55c6-147e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.252.234:53367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772266935, "uuid": "9719c752-147e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.131.46:48326/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772267064, "uuid": "e399ac3d-147e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.197.49:40476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772267563, "uuid": "0d0561de-1480-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.92.206.68:42301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772268323, "uuid": "d2646bf2-1481-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.131.46:48326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772268383, "uuid": "f5c05a35-1481-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.150.107:58801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772268736, "uuid": "c839e862-1482-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.135.86:39010/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772268862, "uuid": "13a26fcd-1483-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.236.181:52797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772269355, "uuid": "398cd0cf-1484-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.149.208:49985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772269748, "uuid": "2397cbcf-1485-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.92.198:56806/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772269817, "uuid": "4cf99a0e-1485-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.150.107:58801/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772270119, "uuid": "00e8aecb-1486-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.149.208:49985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772270291, "uuid": "66efa433-1486-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8468794285/7R5W4jn.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772270349, "uuid": "8985e2fc-1486-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.236.181:52797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772270477, "uuid": "d63c3740-1486-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.105.169:35087/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772270588, "uuid": "188923ab-1487-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://zpcm9g8o.synthgrid.digital/?=check&&actmn=pFOVCVhppWoSjXuB", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772271133, "uuid": "5ccaf766-1488-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.105.169:35087/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772271194, "uuid": "814b02cb-1488-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.41.208:40095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772271375, "uuid": "ed70e877-1488-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.71.67:56085/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772271727, "uuid": "bf26e1e5-1489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeihmvo5nbtacxb7bx6bzla7adpg7ldm2ud3fqbom6724ajlki42urq.ipfs.dweb.link/?filename=22222optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772271727, "uuid": "bf6ea906-1489-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeidp7zdy2lu6yxvbgoev4b6xokuaa6jljr34vkflxzel2ya2gc3plm.ipfs.dweb.link/?filename=xxwConvertedFile.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "SilentCryptoMiner", "colour": "#4432d8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772272039, "uuid": "791ec94a-148a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.48.140:42339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772272220, "uuid": "e4bd442b-148a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.103.47:45045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772272387, "uuid": "485b373f-148b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.2.93.115/copal2", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772272389, "uuid": "497bdbe3-148b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.63/load", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772272389, "uuid": "49a4eb0c-148b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.109.200.63/load.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772272389, "uuid": "49fb2b35-148b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://146.103.105.223/copal.psd", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772272936, "uuid": "8f82a974-148c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.71.67:56085/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772273111, "uuid": "f82d610a-148c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.48.140:42339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772273129, "uuid": "02cceb85-148d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.34.242.49:47486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772273359, "uuid": "8c043514-148d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:43178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772273361, "uuid": "8cfe58f9-148d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.184.53:34174/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772273479, "uuid": "d3551ae0-148d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.168:60303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772273589, "uuid": "14c828ef-148e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://q8dmuuna.optiweave.digital/?=check&&actmn=iUOXryTSdBbSpZdh", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772273712, "uuid": "5e199136-148e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.123.161:50622/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772274316, "uuid": "c663d3b4-148f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.158.232.90:8040/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772274322, "uuid": "c9ee44c4-148f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.158.232.90/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772274431, "uuid": "0b19074d-1490-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.123.161:50622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772274621, "uuid": "7bd4b71e-1490-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.168.210.36:46688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772274743, "uuid": "c4e05008-1490-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.59.23.216:40581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772274914, "uuid": "2ab7573d-1491-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.94:43178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772275038, "uuid": "74c96f59-1491-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.168:60303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772275222, "uuid": "e248cb01-1491-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.184.53:34174/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772275273, "uuid": "00ccbb90-1492-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://talentaclub.com/build/ckSogSn.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772275569, "uuid": "b1548cb3-1492-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.229.192:42880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772275569, "uuid": "b161a220-1492-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.176.2:59818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772275930, "uuid": "8821275a-1493-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ww1xqffa.cyberlens.digital/?=check&&actmn=iEFprNLGKBmIWfPX", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772275941, "uuid": "8ec5423f-1493-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.11.134:45876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772276111, "uuid": "f415f56d-1493-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.195.183:37185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772276236, "uuid": "3f00cfc4-1494-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772276236, "uuid": "3f00e798-1494-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.223.44.153/hiddenbin/Space.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772276237, "uuid": "3f6dd5b7-1494-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.52/bins/mpsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772276237, "uuid": "3f9459ce-1494-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772276238, "uuid": "3ff6ff77-1494-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.83.207.211/bins/sora.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772276531, "uuid": "eea8cbe2-1494-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.205.156:50556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772276722, "uuid": "60181679-1495-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.134.235:37912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772276889, "uuid": "c417d06c-1495-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.11.134:45876/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772277260, "uuid": "a12a7ee1-1496-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.176.2:59818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772277439, "uuid": "0bae12fa-1497-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.229.192:42880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772277487, "uuid": "2872614c-1497-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.33.53:47800/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772277560, "uuid": "53f2677c-1497-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.134.235:37912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772277561, "uuid": "54869ea5-1497-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.170.56:49529/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772277813, "uuid": "ea72c80c-1497-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.118.217:54502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772277921, "uuid": "2b070478-1498-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.118.217:54502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772278819, "uuid": "42940882-149a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.33.53:47800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772278871, "uuid": "618a305b-149a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.201.212:57186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772278998, "uuid": "ad45a60b-149a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.53.252.73:37528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279110, "uuid": "efe37c3f-149a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.126.254:52816/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279227, "uuid": "35a2979b-149b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ursosmart.lol/api/decrypter", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279228, "uuid": "35e9ba8f-149b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ursosmart.lol/api/dps", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279228, "uuid": "3651e604-149b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ursosmart.lol/api/ps", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279229, "uuid": "36a2642b-149b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.232.103.250/cs2.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279347, "uuid": "7ce3b9ff-149b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://z2wx6ccc.cortexforge.digital/?=check&&actmn=SebVSZxrnZLeoqig", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279599, "uuid": "130fe948-149c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.201.212:57186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772279599, "uuid": "13488a0a-149c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.31.149:36107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772281027, "uuid": "665cddfc-149f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7556497175/BQd8MmP.ps1", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772281212, "uuid": "d49b65b8-149f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.92.52:48449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772281338, "uuid": "1fe9ee3c-14a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.210:33047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772281519, "uuid": "8b72f09a-14a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.236.123:35775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772281571, "uuid": "aa71a8ee-14a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7693449169/8IFbvda.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772281694, "uuid": "f3c66a36-14a0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.106.64:37038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772282050, "uuid": "c83dc3df-14a1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.237.192:49904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772282321, "uuid": "697953d8-14a2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.217.244:40041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772282596, "uuid": "0d90edcc-14a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:37705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772282659, "uuid": "33142220-14a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.238.186:49201/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772282667, "uuid": "37b16a2e-14a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.53.252.73:37528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772282717, "uuid": "55ce5a17-14a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.250.180:46312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772282896, "uuid": "c0a53b8c-14a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.210:33047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772282948, "uuid": "df5b79e8-14a3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dmv2ddsm.mozillacola.digital/?=check&&actmn=vyjrKGakWSQaNLIO", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772283490, "uuid": "226fdb79-14a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.41.208:40095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772283676, "uuid": "9131a7fc-14a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.107.108:37356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772283791, "uuid": "d615d9d9-14a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.158.245:40544/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772283858, "uuid": "fdfbd368-14a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.250.180:46312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772283858, "uuid": "fe1160ee-14a5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.107.108:37356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772284289, "uuid": "fed90248-14a6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.88.253:54080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772284520, "uuid": "8816dbf6-14a7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.158.245:40544/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772285066, "uuid": "cdbd6cad-14a8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.113.83:37095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772285365, "uuid": "7fe7366b-14a9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.38.106.19:58693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772285843, "uuid": "9cfacea3-14aa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.88.253:54080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772286205, "uuid": "74b0259e-14ab-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.106.64:37038/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772286626, "uuid": "6fd94c36-14ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.222.40:44787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772286683, "uuid": "91dfe042-14ac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.14.82:36179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287216, "uuid": "cf7b2985-14ad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.222.40:44787/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287453, "uuid": "5c987098-14ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.129.100/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287456, "uuid": "5e919c10-14ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://152.173.199.182:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287457, "uuid": "5ed97a81-14ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.127.250.241:9000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287459, "uuid": "603375d6-14ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.160.59.155:42952/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287462, "uuid": "62064cbc-14ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.81.45.134:37720/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287471, "uuid": "6792f7dc-14ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.101.73.68:37779/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287512, "uuid": "7f799924-14ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://66.154.110.34/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287550, "uuid": "967de6f5-14ae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.224.28.186/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287758, "uuid": "12a69ace-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/pmips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287759, "uuid": "12cf4c61-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/pm68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287759, "uuid": "12d140b5-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/psh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287759, "uuid": "12ee5d88-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/parm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287759, "uuid": "12ef842d-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/pmpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287759, "uuid": "130924cc-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/parm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287759, "uuid": "1309a5f0-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/bin", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287760, "uuid": "13744c9a-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/pay", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287760, "uuid": "138667a7-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/yarn", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287760, "uuid": "13993b03-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/parm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287760, "uuid": "13a2f8f6-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/px86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287760, "uuid": "13c20c5e-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/kla.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287760, "uuid": "13d2cee1-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://docsfakegen.com/bins/parm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772287762, "uuid": "14dd4435-14af-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:56849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288828, "uuid": "8ff5cdb6-14b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://documentos.microsoft-waresystems.com/Plugin_Planilha.vbs", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288828, "uuid": "901173f7-14b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.196.10.230/Planilha_Faturamento.xlsx.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288828, "uuid": "902798e6-14b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://185.196.10.230/Plugin_Planilha.vbs", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288828, "uuid": "9039860c-14b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://documentos.microsoft-waresystems.com/Planilha_Faturamento.xlsx.lnk", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772288830, "uuid": "916ae90a-14b1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://file.garden/aUviSvysUw5ANn2A/Ptar.png", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "20fecab0-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "21013350-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "2105ad04-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "21065222-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "210d9759-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "21166579-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "211a498a-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "2123898b-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/debug", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "2124ac3e-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "212619a8-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "21281fc6-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "212a8bad-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289071, "uuid": "212d234a-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289072, "uuid": "21494128-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289072, "uuid": "215772fd-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289128, "uuid": "42ad5b0e-14b2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.54.160.11/001010101010010110101011101010101101010111010101/nwfaiehg4ewijfgriehgirehaughrarg.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289668, "uuid": "84f56c05-14b3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://r0e3fpkc.operafanta.digital/?=check&&actmn=HAsmZIwTPKMMRyIx", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289909, "uuid": "14a603c1-14b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://oficialrem.duckdns.org/SOSTENER.bat", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289910, "uuid": "14c56178-14b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://oficialrem.duckdns.org/SOSTENER.js", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289911, "uuid": "156cfcfb-14b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://oficialrem.duckdns.org/a.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772289913, "uuid": "169706a5-14b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://oficialrem.duckdns.org/SOSTENER.vbs", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290276, "uuid": "ef2c6637-14b4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.115.250:42411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290451, "uuid": "578fc460-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8408827406/AHUfa84.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290553, "uuid": "940897ce-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.74.45:58561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290581, "uuid": "a4efe5e8-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290581, "uuid": "a4f44bd8-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290581, "uuid": "a4f4cb30-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290581, "uuid": "a4fca9e4-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290581, "uuid": "a5076599-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290581, "uuid": "a50d41e5-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290581, "uuid": "a50dfd08-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290581, "uuid": "a526f918-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290581, "uuid": "a528db3a-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290583, "uuid": "a5fd001f-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772290643, "uuid": "ca2697c4-14b5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.171/bins/hoho.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291185, "uuid": "0cdc8f3e-14b7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.112.100:57672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291308, "uuid": "56721055-14b7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.77.16:37643/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291727, "uuid": "500115f9-14b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.123.58:39679/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291783, "uuid": "7174e39d-14b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.82.25:53587/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291901, "uuid": "b806c9b9-14b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.77.25:43475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772291966, "uuid": "de71a1c9-14b8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:56849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772292023, "uuid": "003478b0-14b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.106.148:34696/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772292080, "uuid": "2261c33a-14b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.43.128:38515/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772292259, "uuid": "8d221830-14b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.253.93:43028/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772292259, "uuid": "8d311bbf-14b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.45:36829/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772292383, "uuid": "d75c0947-14b9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.43.128:38515/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293166, "uuid": "aa0f2f07-14bb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.155.61:45935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293460, "uuid": "58d19a95-14bc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.32.97:36768/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293461, "uuid": "59cf2dab-14bc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.177.204:58935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293706, "uuid": "eba8b746-14bc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.243.100:43012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293707, "uuid": "ec6d202c-14bc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.112.100:57672/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772293811, "uuid": "2a5f66c5-14bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/748049926/k9I9JOM.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772294000, "uuid": "9aaa8d50-14bd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.243.100:43012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772294351, "uuid": "6c30f792-14be-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.177.204:58935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772294712, "uuid": "430f9cfb-14bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.77.25:43475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772294777, "uuid": "6a3bdc14-14bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.120.247:51170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772294777, "uuid": "6a3c3466-14bf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.155.61:45935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772295189, "uuid": "5f593e2a-14c0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kn1kwx56.chromepepsi.digital/?=check&&actmn=hHRTlUlMnnyUpwMl", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772295923, "uuid": "15555a9c-14c2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.142.84:34281/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772296809, "uuid": "250cc5c1-14c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.51.215:33032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772296871, "uuid": "49e0cabc-14c4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.142.84:34281/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "66e797fb-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/gp3agts8a5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "66e7a246-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/0tupj6m8h3", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "66e884d0-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/55vrn6yo1m", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "67255144-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/dszu1nu093", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "672552d2-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/8cb7qpuydx", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "673a136e-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/8iwks17l9s", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "673a3f03-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/8mrg3tlpxq", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297349, "uuid": "67458ac1-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/as1kxl6nr8", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297351, "uuid": "67f9406c-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/88296p2ett", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297361, "uuid": "6e77171c-14c5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/fit075kmyvo3/assets/js/5z1bep0pjw", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297775, "uuid": "64ac3fb3-14c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.131.213:58542/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772297958, "uuid": "d22a838c-14c6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.51.215:33032/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772298084, "uuid": "1cf68296-14c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.241:41797/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772298196, "uuid": "6023a086-14c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.43:55784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772298430, "uuid": "eba04afa-14c7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772298524, "uuid": "2376393e-14c8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.241:41797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772298919, "uuid": "0f0d78f9-14c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.49.238:34031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299105, "uuid": "7d8a2a7a-14c9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.131.213:58542/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299337, "uuid": "07f2317c-14ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.62:47650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299528, "uuid": "79d0b853-14ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.80.62:47650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299702, "uuid": "e1a1c30f-14ca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.213.43:55784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299986, "uuid": "8af4c045-14cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.194.67.137:8080/client/Chrome.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299987, "uuid": "8b1c8232-14cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.194.67.137:8080/client/ChromeTemplate.ps1", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299988, "uuid": "8bf59b3d-14cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.194.67.137:8080/client/setup.cmd", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299988, "uuid": "8bf5c6ce-14cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.194.67.137:8080/client/p.txt", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299990, "uuid": "8d38c330-14cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.194.67.137:8080/client/beacon.bin", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299991, "uuid": "8dae4235-14cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://18.194.67.137:8080/client/fff.bin", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772299994, "uuid": "8f79254e-14cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.192.134:36183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300120, "uuid": "dadfff03-14cb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.20.53:36273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300227, "uuid": "1a559169-14cc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://34.58.195.70/payload.ps1", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300227, "uuid": "1a57f549-14cc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://34.58.195.70/diagnostico.exe", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300227, "uuid": "1a58f28b-14cc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://34.58.195.70/clinica_update.exe", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300301, "uuid": "46481ed7-14cc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.21.75:42290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300588, "uuid": "f18ca4e4-14cc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://34.171.22.107/purplefinal.exe", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300588, "uuid": "f1900fb5-14cc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://34.171.22.107/purplefinal.zip", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300904, "uuid": "ae2ba8ee-14cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.192.134:36183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772300977, "uuid": "d93ba3a6-14cd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.34.54:36854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301190, "uuid": "583aa0ca-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.121.29/klaus.iso", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301190, "uuid": "583c5c68-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.121.29/klaus.lnk", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301190, "uuid": "583c604c-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.121.29/klaus1.zip", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301190, "uuid": "583c60f4-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.121.29/tmp/klaus.lnk", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301192, "uuid": "59947e63-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.121.29/klaus.l%25%25nk", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301192, "uuid": "59dc3c35-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hp1d.com.br/klaus1.zip", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301192, "uuid": "59e39d93-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hp1d.com.br/tmp/klaus.lnk", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301193, "uuid": "5a3b5ea5-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hp1d.com.br/klaus.iso", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301193, "uuid": "5a586e7a-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hp1d.com.br/klaus.l%25%25nk", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301194, "uuid": "5ac4be89-14ce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hp1d.com.br/klaus.ps1", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301677, "uuid": "7aa72511-14cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.20.53:36273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301732, "uuid": "9b682937-14cf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.232.31:33705/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772301918, "uuid": "0a29e7e2-14d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:39839/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772302047, "uuid": "57384ec6-14d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.251:42291/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772302047, "uuid": "577efa81-14d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.131.205:51808/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772302169, "uuid": "a00911db-14d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.21.75:42290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772302211, "uuid": "b8c2ac19-14d0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.223.166:57939/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772302568, "uuid": "8e00f1d6-14d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.88.8:45470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772302568, "uuid": "8e07d118-14d1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.14.251:42291/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772302813, "uuid": "200bbd07-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.88.8:45470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772302999, "uuid": "8ea2ce6e-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.18.96:54166/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303012, "uuid": "9697990e-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.108.187:58644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303116, "uuid": "d44ee477-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.179:41776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f59006e9-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f591e740-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f59a4125-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/spc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f59ce827-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f59cfe5e-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/arm4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f5a128a1-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f5a19f4d-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f5a25ec1-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f5a73224-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f5a76fbd-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f5b56f8c-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303172, "uuid": "f5b7fc12-14d2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.141.26.129/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303349, "uuid": "5f265ef4-14d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.52.76.13:58431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303418, "uuid": "8872cc04-14d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.155.17.49:36378/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303419, "uuid": "88e4a161-14d3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.252.138:57044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772303657, "uuid": "1723a4bf-14d4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.131.205:51808/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304191, "uuid": "55066edb-14d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.155.17.49:36378/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304376, "uuid": "c38306ec-14d5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.18.96:54166/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304499, "uuid": "0c9f9843-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.17.148:38893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304548, "uuid": "29c4d791-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.194.118:43659/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304621, "uuid": "55bcf468-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.127.248.192:9000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304621, "uuid": "55bcf5a1-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.98.142.205:1750/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304621, "uuid": "55c8c379-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.110.179.199/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304622, "uuid": "560dbbb9-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.72.59:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304622, "uuid": "5613af2a-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.72.59:86/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304625, "uuid": "57e64471-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.236.247.68/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304628, "uuid": "59678d9e-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.119.128:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304677, "uuid": "76afa62a-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.52.76.13:58431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304738, "uuid": "9b77648d-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.84.179:41776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304787, "uuid": "b823d669-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.97:5553/babi.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "WallStealer", "colour": "#4aadef", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772304787, "uuid": "b876ffdd-14d6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://google-securedocs.makeneg458.workers.dev/update.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772305340, "uuid": "01c87d2e-14d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.202.175:50734/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772305410, "uuid": "2b8670d2-14d8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.242.22.242:60834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772305988, "uuid": "841074ec-14d9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:32532/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772306320, "uuid": "4a3314ab-14da-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.210.198:49057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772306710, "uuid": "32dcdb54-14db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.239.36:28106/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772306790, "uuid": "62964730-14db-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:56910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307141, "uuid": "337c27c9-14dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:49631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307147, "uuid": "375812bc-14dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.202.175:50734/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307387, "uuid": "c5f79819-14dc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.47.55:40698/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307625, "uuid": "5427ae04-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.181.226.11:42528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307846, "uuid": "d7b52f83-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/0ec7i68M", "Tag": [ { "name": "BeaverTail", "colour": "#193B98", "exportable": true, "hide_tag": false }, { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false }, { "name": "NorthKorea", "colour": "#98b208", "exportable": true, "hide_tag": false }, { "name": "npm", "colour": "#2c9036", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307846, "uuid": "d7c6e063-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/DjDCxcsT", "Tag": [ { "name": "BeaverTail", "colour": "#193B98", "exportable": true, "hide_tag": false }, { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false }, { "name": "NorthKorea", "colour": "#98b208", "exportable": true, "hide_tag": false }, { "name": "npm", "colour": "#2c9036", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307847, "uuid": "d8124a1e-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext-checkdin.vercel.app/api/w", "Tag": [ { "name": "BeaverTail", "colour": "#193B98", "exportable": true, "hide_tag": false }, { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false }, { "name": "NorthKorea", "colour": "#98b208", "exportable": true, "hide_tag": false }, { "name": "npm", "colour": "#2c9036", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307848, "uuid": "d8f3b146-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://ext-checkdin.vercel.app/api/tokenl?st=NkQ2TGJ5THlKVDZ5N1ZlMi84dVB0dz09Omc4U3hTbUVpNGwzQ1RwNWJoTWMyVDFWSkhQalk3UXFmUDE3bE5BRFF4QTluVDlZNW9KcmpBaDlONzBJNzBzU3NiUDBmTmg5K2NyTWhHOFBYUWsrRnM0Y3NnaCs5eXZRMWpMcWNvcnA5VVQxcmVBM3Jyd2pJV0VqZmFuV0d6RWJRYWJqREJDbzZQME5sSTNORGNTOXVCb3V4NnQ3RTRlNGdmcG1FSDBSTmhwVT0", "Tag": [ { "name": "BeaverTail", "colour": "#193B98", "exportable": true, "hide_tag": false }, { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false }, { "name": "NorthKorea", "colour": "#98b208", "exportable": true, "hide_tag": false }, { "name": "npm", "colour": "#2c9036", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307850, "uuid": "d9dd43a0-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext-checkdin.vercel.app/api/m", "Tag": [ { "name": "BeaverTail", "colour": "#193B98", "exportable": true, "hide_tag": false }, { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false }, { "name": "NorthKorea", "colour": "#98b208", "exportable": true, "hide_tag": false }, { "name": "npm", "colour": "#2c9036", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307851, "uuid": "dafe3506-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/CJ5PrtNk", "Tag": [ { "name": "BeaverTail", "colour": "#193B98", "exportable": true, "hide_tag": false }, { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false }, { "name": "NorthKorea", "colour": "#98b208", "exportable": true, "hide_tag": false }, { "name": "npm", "colour": "#2c9036", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307852, "uuid": "db7706aa-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ext-checkdin.vercel.app/api/l", "Tag": [ { "name": "BeaverTail", "colour": "#193B98", "exportable": true, "hide_tag": false }, { "name": "DPRK", "colour": "#43d2dc", "exportable": true, "hide_tag": false }, { "name": "NorthKorea", "colour": "#98b208", "exportable": true, "hide_tag": false }, { "name": "npm", "colour": "#2c9036", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307865, "uuid": "e2f79383-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://173.28.103.46:49631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772307911, "uuid": "feadd104-14dd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.182.82.13/2.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772308224, "uuid": "b8eaf530-14de-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.168.16:53249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772308470, "uuid": "4b6cd164-14df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.181.226.11:42528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772308516, "uuid": "67483bf5-14df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.84.159:38473/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772308642, "uuid": "b20c3b82-14df-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.14.229:56910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772309117, "uuid": "cd4d0072-14e0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.47.55:40698/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772309231, "uuid": "111fbc2b-14e1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.155.82:35337/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772309428, "uuid": "86d0cddd-14e1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.27.117:58994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772309478, "uuid": "a4ab25c5-14e1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.95.84.159:38473/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772309787, "uuid": "5c971fa1-14e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.167:46226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772309955, "uuid": "c09bf3b7-14e2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.167:46226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772310204, "uuid": "552bafd4-14e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.8:35547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772310255, "uuid": "73ce1e85-14e3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.27.179:36810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772310500, "uuid": "05f012a4-14e4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.95.32:32967/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772310729, "uuid": "8de5eb7d-14e4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.27.117:58994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772310808, "uuid": "bd0676cf-14e4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.222:52974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772310855, "uuid": "d951d3a8-14e4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.155.82:35337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772311340, "uuid": "fa935a2e-14e5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.95.32:32967/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772311761, "uuid": "f53d4126-14e6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.168.16:53249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772312355, "uuid": "57559378-14e8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.196.237:52069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772312844, "uuid": "7ad3f1cf-14e9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.91.106:43660/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772313068, "uuid": "000a9329-14ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7316173289/zCg4Tsb.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772313383, "uuid": "bc4b5aaa-14ea-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.252.128:54526/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772313797, "uuid": "b31a6544-14eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.113.83:37095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772313917, "uuid": "fa7a9497-14eb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.196.237:52069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772314328, "uuid": "ef636f51-14ec-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:12446/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772314521, "uuid": "6275d20d-14ed-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.140.217:55573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772314877, "uuid": "36451091-14ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.158:54243/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772315180, "uuid": "eb21ee26-14ee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.34.54:36854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772315528, "uuid": "ba74470b-14ef-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:33555/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772315658, "uuid": "07ece801-14f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.168:41564/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772315828, "uuid": "6d329a24-14f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Thanh762003/Roblox-Blind-Shot-Script/raw/refs/heads/main/representant/Script-Blind-Roblox-Shot-v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772315828, "uuid": "6d56e49d-14f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Thanh762003/Roblox-Blind-Shot-Script/refs/heads/main/representant/Script-Blind-Roblox-Shot-v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772315837, "uuid": "72d5702d-14f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.63.190:44503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772315886, "uuid": "9013997a-14f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/mastercode07/Fisch-Script/refs/heads/main/bungee/Fisch_Script_siper.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772315886, "uuid": "9014ed36-14f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mastercode07/Fisch-Script/raw/refs/heads/main/bungee/Fisch_Script_siper.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316007, "uuid": "d82b7dd8-14f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/zinebaitaddi/Bee-Swarm-Simulator-Script/main/freehearted/Script_Simulator_Swarm_Bee_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316009, "uuid": "d963e2fe-14f0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/zinebaitaddi/Bee-Swarm-Simulator-Script/raw/refs/heads/main/freehearted/Script_Simulator_Swarm_Bee_1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316128, "uuid": "20245b3b-14f1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/NaoMeEsquece/Blox-Fruits/main/catastrophically/Fruits_Blox_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316128, "uuid": "202b3259-14f1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/NaoMeEsquece/Blox-Fruits/raw/refs/heads/main/catastrophically/Fruits_Blox_1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316187, "uuid": "435ee637-14f1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/r4hm4candy-cyber/Roblox-Knife-Arena-Script/raw/refs/heads/main/Spaniardo/Script-Knife-Arena-Roblox-2.6-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316188, "uuid": "442892af-14f1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/r4hm4candy-cyber/Roblox-Knife-Arena-Script/refs/heads/main/Spaniardo/Script-Knife-Arena-Roblox-2.6-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316317, "uuid": "90fdbdaa-14f1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.158:54243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316487, "uuid": "f60f3da9-14f1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/laouysalma/Roblox-Blind-Shot-Script/raw/refs/heads/main/fosteringly/Roblox_Shot_Blind_Script_v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316488, "uuid": "f6ac6040-14f1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/laouysalma/Roblox-Blind-Shot-Script/main/fosteringly/Roblox_Shot_Blind_Script_v1.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316547, "uuid": "1a073543-14f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Karenmoreno12/Pet-Simulator-99/raw/refs/heads/main/subject/Simulator_Pet_2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316548, "uuid": "1a9dffd0-14f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Karenmoreno12/Pet-Simulator-99/main/subject/Simulator_Pet_2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316787, "uuid": "a93e21e8-14f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/drnxx2/Pet-Simulator-99/raw/refs/heads/main/colorful/Simulator_Pet_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772316791, "uuid": "ab5fe69e-14f2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/drnxx2/Pet-Simulator-99/main/colorful/Simulator_Pet_v3.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772317160, "uuid": "87313a44-14f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.168:41564/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772317278, "uuid": "cdec3b9b-14f3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.63.190:44503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772317747, "uuid": "e5150e44-14f4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:30425/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772317878, "uuid": "33564a8b-14f5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.146.103:33129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772319068, "uuid": "f8b12da0-14f7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.80.102:46467/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772319257, "uuid": "691d44b3-14f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.146.103:33129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772319368, "uuid": "ab31307f-14f8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.64.146:47802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772320931, "uuid": "4f441e0b-14fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.37:55100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772320933, "uuid": "4fe8c94c-14fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.159.79.197:55308/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772321226, "uuid": "fed882da-14fc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fullsofts.org/", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772321296, "uuid": "285355e8-14fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mortalsleuthtalk90/ktibepzx/releases/download/requ/Git_Latest_Software.v4.0.0.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772321359, "uuid": "4e08897e-14fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.158.126:34627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772321467, "uuid": "8eb9b006-14fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/faishal10/backup-files/raw/refs/heads/main/archives/1.rar", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772321469, "uuid": "8f6fb13d-14fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/faishal10/backup-files/refs/heads/main/archives/1.rar", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772321477, "uuid": "94a8323e-14fd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.26.15:38112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322009, "uuid": "d1a63e98-14fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.201.118:11178/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322010, "uuid": "d20fe830-14fe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/IronTraderKnow/RLoader/raw/refs/heads/main/RLoader.zip", "Tag": [ { "name": "pw-500600", "colour": "#18cc23", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322144, "uuid": "21d0540c-14ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.159.79.197:55308/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322279, "uuid": "727ee372-14ff-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/maetaakiris-silent/verbose-silent/releases/download/28-02-2026/Silent_Utility_V4.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322677, "uuid": "5ff92c03-1500-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.67.232:33095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322678, "uuid": "605976ed-1500-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.81.37:55100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322787, "uuid": "a1045694-1500-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://o90zx8u6.vivaldisprite.digital/?=check&&actmn=FFlAYjhGNvIEDTts", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322797, "uuid": "a6fe0c30-1500-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.115.250:42411/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322797, "uuid": "a71e29b3-1500-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.38.127:38023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772322847, "uuid": "c4efdcdf-1500-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.182.193:27669/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772323033, "uuid": "33e951f2-1501-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.158.126:34627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1772323095, "uuid": "58d45af3-1501-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.223.166:57939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772307607, "uuid": "4926dbe3-14dd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.181.226.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242624, "uuid": "fc9bbdd5-1445-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.29.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772261107, "uuid": "04dda255-1471-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.80.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772314865, "uuid": "2f37e353-14ee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.44.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290508, "uuid": "7954cf4f-14b5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.74.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772240584, "uuid": "3cb073d3-1441-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.226.7.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772305385, "uuid": "1cbdc5b3-14d8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.242.22.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772277787, "uuid": "daf3f8e4-1497-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.118.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287449, "uuid": "5a0cfb0c-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.81.45.134", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266444, "uuid": "72776eb0-147d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.92.206.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772250965, "uuid": "67e2a208-1459-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.37.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772302985, "uuid": "8684ae7c-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.108.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263508, "uuid": "9c0b81fa-1476-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.223.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772249224, "uuid": "5a5460b7-1455-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.201.118", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772276706, "uuid": "56ad263f-1495-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.134.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242025, "uuid": "975e8585-1444-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.78.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772258524, "uuid": "01cbc42c-146b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.66.71", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772250484, "uuid": "499e82b0-1458-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.243.115", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772268365, "uuid": "eb19f168-1481-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.150.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772249285, "uuid": "7e994994-1455-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.152.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293146, "uuid": "9d9c85d7-14bb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.155.61", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772251025, "uuid": "8b8b353a-1459-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.248.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287449, "uuid": "5a09ced9-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.101.73.68", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304606, "uuid": "4cb01f96-14d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.110.179.199", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772272026, "uuid": "711bded0-148a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.48.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772273345, "uuid": "8378b05d-148d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.196.184.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772250366, "uuid": "02bca46d-1458-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.2.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291766, "uuid": "673c6c62-14b8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.82.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772310786, "uuid": "afec2837-14e4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.91.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246707, "uuid": "7e00524f-144f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.186.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772239144, "uuid": "e26542f0-143d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.192.90", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772310247, "uuid": "6f16f7aa-14e3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.27.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245866, "uuid": "887f6fdd-144d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.90.149.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772302031, "uuid": "4db93d9c-14d0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.131.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772282584, "uuid": "06557d37-14a3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.238.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772295907, "uuid": "0bbbb725-14c2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.142.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304606, "uuid": "4cafc465-14d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.157.72.59", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293685, "uuid": "df6a9369-14bc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.243.100", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264225, "uuid": "47dc0855-1478-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.252.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772251084, "uuid": "af0d163a-1459-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.77.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772275564, "uuid": "ae2c10ec-1492-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.229.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300107, "uuid": "d2dd8dd9-14cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.20.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246406, "uuid": "cacd5ad9-144e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.57.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772320925, "uuid": "4b86001d-14fc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.159.79.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772306285, "uuid": "354b4d5b-14da-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.210.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304484, "uuid": "03f74189-14d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.17.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300285, "uuid": "3d4df0a0-14cc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.21.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772254325, "uuid": "3b001a70-1461-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.224.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772281506, "uuid": "83ac853a-14a0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.236.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772252525, "uuid": "09b1bc90-145d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.118.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772238066, "uuid": "5fa724af-143b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.171.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772273706, "uuid": "5a972610-148e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.123.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772283665, "uuid": "8a7846f0-14a5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.107.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299985, "uuid": "8a793da4-14cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.192.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772306707, "uuid": "30df9ba1-14db-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.234.239.36", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772302985, "uuid": "8684cc5b-14d2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.18.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772315825, "uuid": "6b6db4b2-14f0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.63.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772271364, "uuid": "e6c00020-1488-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.71.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290567, "uuid": "9c9f2ee6-14b5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.180.171", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304606, "uuid": "4cb003a9-14d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.236.247.68", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289066, "uuid": "1e18de8a-14b2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "142.54.160.11", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772272385, "uuid": "4755d730-148b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "146.103.105.223", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287449, "uuid": "5a09cbeb-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "152.173.199.182", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287509, "uuid": "7dc7d42f-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.224.28.186", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772301189, "uuid": "57cf4093-14ce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "157.245.121.29", "Tag": [ { "name": "cookie", "colour": "#c33d4a", "exportable": true, "hide_tag": false }, { "name": "latam", "colour": "#ce5b01", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772273106, "uuid": "f531b62b-148c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "174.34.242.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772313365, "uuid": "b17c9bf3-14ea-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.252.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772281207, "uuid": "d15cc083-149f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.92.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772274606, "uuid": "736fa162-1490-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.168.210.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772276526, "uuid": "eb87bfbd-1494-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.205.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245266, "uuid": "2308189c-144c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.175.254.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772241966, "uuid": "7446c739-1444-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.207.169.188", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772299985, "uuid": "8a78940e-14cb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "18.194.67.137", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "uacbypass", "colour": "#a699f2", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772278984, "uuid": "a45f8c9e-149a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.53.252.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772261044, "uuid": "dfb19d7e-1470-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.14.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772242567, "uuid": "da3a7dfb-1445-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.201.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772253664, "uuid": "b0a928e1-145f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.117.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772262725, "uuid": "c98fdc21-1474-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.49.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772238186, "uuid": "a6eb536c-143b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.44.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772319065, "uuid": "f6d31dda-14f7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.80.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772277547, "uuid": "4c156cc8-1497-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.170.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772275564, "uuid": "ae2c3f5c-1492-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.176.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246466, "uuid": "ee67e6e2-144e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.69.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772269326, "uuid": "27ff54f3-1484-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.247.149.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772303344, "uuid": "5c7c3cff-14d3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.52.76.13", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772307907, "uuid": "fbefe5c0-14dd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.182.82.13", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288826, "uuid": "8ed18dcb-14b1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.196.10.230", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false }, { "name": "vbs", "colour": "#c59b77", "exportable": true, "hide_tag": false }, { "name": "WsgiDAV", "colour": "#860016", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772272385, "uuid": "4755eb89-148b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.109.200.63", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772274307, "uuid": "c0df6508-148f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.158.232.90", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "rmm", "colour": "#12e181", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772272385, "uuid": "4755c278-148b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.2.93.115", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287449, "uuid": "5a09ad99-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.160.59.155", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279584, "uuid": "0a7ce11b-149c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.29.31.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772296804, "uuid": "2255dcce-14c4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.51.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772286612, "uuid": "671723ab-14ac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.222.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772261406, "uuid": "b763e73b-1471-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.161.160.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772237045, "uuid": "ff1eb11e-1438-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.140.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772307365, "uuid": "b8bef7e0-14dc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.47.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772312825, "uuid": "6f82133c-14e9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.91.106", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772278866, "uuid": "5e0f6842-149a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.201.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772297764, "uuid": "5e9fb17c-14c6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.131.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264466, "uuid": "d730dff1-1478-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.13.208.135", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300585, "uuid": "efc607fa-14cc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "34.171.22.107", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772300225, "uuid": "1922f476-14cc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "34.58.195.70", "Tag": [ { "name": "Metasploit", "colour": "#7f3f57", "exportable": true, "hide_tag": false }, { "name": "meterpreter", "colour": "#e49074", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772238725, "uuid": "e8921ec3-143c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.77.4.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772290268, "uuid": "eab03185-14b4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.82.115.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772259007, "uuid": "2128b952-146c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.221.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772308206, "uuid": "ae7b650d-14de-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.168.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772241126, "uuid": "7f55a855-1442-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.239.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772282285, "uuid": "53f96760-14a2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.217.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772312345, "uuid": "5168963a-14e8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.196.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772268846, "uuid": "09c207a3-1483-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.236.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772261524, "uuid": "fdcdbc1f-1471-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.17.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772244784, "uuid": "0416efc3-144b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.91.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772293445, "uuid": "501036a7-14bc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.177.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772247185, "uuid": "9af08e36-1450-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.178.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291707, "uuid": "444ba0d3-14b8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.123.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304606, "uuid": "4cb016f8-14d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.98.142.205", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772298426, "uuid": "e8e2b0ad-14c7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.141.26.129", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772241966, "uuid": "7446fb2d-1444-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.47.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304606, "uuid": "4cafd635-14d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.119.128", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772283784, "uuid": "d1b36ec3-14a5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.158.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772291885, "uuid": "ae2eb361-14b8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.77.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263864, "uuid": "7096b667-1477-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.242.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772251806, "uuid": "5d7293dc-145b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.132.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772257265, "uuid": "12fa66d9-1468-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.21.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772308507, "uuid": "617bd1a7-14df-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.95.84.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772250065, "uuid": "4fa6fdd3-1457-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.136.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266926, "uuid": "91915a0a-147e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.131.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772251985, "uuid": "c81771ee-145b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.105.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772254445, "uuid": "8268efaf-1461-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.132.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772305324, "uuid": "f8c4fd7f-14d7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.202.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772269745, "uuid": "21d9f592-1485-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.92.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772259185, "uuid": "8b6ad028-146c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.58.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287509, "uuid": "7dc7d688-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "66.154.110.34", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287449, "uuid": "5a08ac43-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.129.100", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304606, "uuid": "4cb01134-14d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.127.248.192", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287449, "uuid": "5a09873c-14ae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.127.250.241", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772266084, "uuid": "9bbf140c-147c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95zxw7vw.opticprime.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772271725, "uuid": "be036ec8-1489-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeidp7zdy2lu6yxvbgoev4b6xokuaa6jljr34vkflxzel2ya2gc3plm.ipfs.dweb.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772271725, "uuid": "be03a24b-1489-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeihmvo5nbtacxb7bx6bzla7adpg7ldm2ud3fqbom6724ajlki42urq.ipfs.dweb.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263988, "uuid": "ba47e13e-1477-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "carrier-packets-docs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772282946, "uuid": "ddfbfe89-14a3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dmv2ddsm.mozillacola.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772287753, "uuid": "0f34cc9d-14af-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "docsfakegen.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772288826, "uuid": "8ee30f05-14b1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "documentos.microsoft-waresystems.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264048, "uuid": "de09684b-1477-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "download.x64-google.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772264046, "uuid": "dd0d2373-1477-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "electroboob.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772307846, "uuid": "d777100d-14dd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ext-checkdin.vercel.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772321225, "uuid": "fe490e0b-14fc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fullsofts.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772304785, "uuid": "b70aeda3-14d6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "google-securedocs.makeneg458.workers.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772301189, "uuid": "57f07be6-14ce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hp1d.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772295187, "uuid": "5e1bab38-14c0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kn1kwx56.chromepepsi.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772322784, "uuid": "9fb9d6b0-1500-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "o90zx8u6.vivaldisprite.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289908, "uuid": "139c7a68-14b4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "oficialrem.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772273587, "uuid": "13866862-148e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "q8dmuuna.optiweave.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772263986, "uuid": "b9321621-1477-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "qto12q.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772289666, "uuid": "83a0895b-14b3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "r0e3fpkc.operafanta.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772275268, "uuid": "fddd3358-1491-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "talentaclub.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279225, "uuid": "34432fe8-149b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ursosmart.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772245806, "uuid": "65424286-144d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ventira.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772246946, "uuid": "0c4f6122-1450-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "vinievent.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772275928, "uuid": "86fd48e9-1493-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ww1xqffa.cyberlens.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772279345, "uuid": "7b8fefbf-149b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "z2wx6ccc.cortexforge.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1772270586, "uuid": "172767d3-1487-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "zpcm9g8o.synthgrid.digital" } ] } }