{ "Event": { "published": true, "date": "2026-04-21", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-21", "timestamp": 1776816923, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "b28be99b-c6ba-4489-af20-b5824de2501e", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776729916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776729916, "uuid": "4332bb1b-4951-42a5-a101-122b652c661d", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776729916, "uuid": "2832b3fb-dcb4-49db-bda6-5ad38b992de9", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776729916, "uuid": "19329ba2-d2ef-4b95-a4df-d47602b6ccf9", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776729916, "uuid": "5f4d8881-f7bb-47e6-b0dc-59d372d82cab", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776729916, "uuid": "ad04b393-d573-4a9a-b1b9-84ef70f32143", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "090daa0c-3d16-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776730027, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730027, "uuid": "7195d449-57b1-43e8-99cb-c987cb8aa183", "comment": "Malware payload (Mirai)", "value": "dabe7bd2e876bcbd9864c9cfe9475eff", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730027, "uuid": "7f82a79d-d93a-4ab6-9cf0-256e75c014c4", "comment": "Malware payload (Mirai)", "value": "69759effb888f132550e4ed607ae2e80c9c6559ac13799b7741c3cc855c52dec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730027, "uuid": "8062798a-6b36-479d-afc0-e27310bcec7a", "value": "T1CF142DA6C44DC5C7C922127C61A9AF7BCE3FB2EB1709CD02BED4643089C5E9B7A16D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730027, "uuid": "89268d88-1c51-46c4-a5e6-de9ffe5707d0", "value": "1536:jycKjTfKQw/AHsxIW/lu9jnrHIHf2CLfiWla38+BkmonTtiK+pK7DKrtwp+Vp+wi:vKjTfKQAs8HfxLq8asXnTIs6Zg7iRVv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776730027, "uuid": "ca29af80-6a6f-4243-a643-c60cdb8cf723", "value": 194444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730027, "uuid": "8b6bf34f-44bf-460a-a833-2c1a313eb75f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e5c7ebe-3d16-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776730063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730063, "uuid": "76d55d85-b7ce-476f-b11b-7ef2d613d058", "comment": "Malware payload (Mirai)", "value": "92b828190df947bc71aab4021fc90a95", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730063, "uuid": "567e1a38-d46f-4a55-870e-f95f9d3b94e6", "comment": "Malware payload (Mirai)", "value": "6f222e6f9b8b1c1498fe85eb759cd12dcdcc3484af74c7691f9c0bd606ee2fd0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730063, "uuid": "638ea198-c7ba-4c39-850c-824628a5593c", "value": "T1F1140D31B4CCD9C7C426617CA1EDAF7ACD3EF2DA2605DD037ED465314AC9E9A2A0AC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730063, "uuid": "dbf19d5c-076c-4453-b3e3-3938ca8e75f7", "value": "1536:j0j4Yy2FevvmP0YM9h9Wcw+0OZ/j/UByTl4iE3qHTkHK+ZK7DKbtgp+Vp+wEiiai:qs7DWA0ONIK4iQqHTJL865fIiu54", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776730063, "uuid": "81cdf801-f09a-47e3-aa1f-1caeb1d98693", "value": 198056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730063, "uuid": "0c95caec-809e-4a5e-80f7-0f7c28335ac2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29b6415a-3d16-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776730082, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730082, "uuid": "58cb75e7-e5b5-4b62-b107-b3f950c0047f", "comment": "Malware payload", "value": "5219867e75ddc8d60386c497c40cabf8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730082, "uuid": "29149afa-19f5-42a2-9357-e738534601b5", "comment": "Malware payload", "value": "24794a1b356634145ebfe2ccd553a6ce9b7e18b05b12beea87b23a30b5215a8d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730082, "uuid": "3c744aae-91ac-4600-a149-c418d6014659", "value": "T18493E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730082, "uuid": "e88095cd-12d2-4887-bf35-f7efa71f5c17", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXXIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776730082, "uuid": "ae260222-2ff3-455a-9c08-0db2c2d3ab3d", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730082, "uuid": "274a2194-c53b-4966-88de-a0341989fbc7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776731420, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776731420, "uuid": "10cfbb59-620f-454d-8bb3-83f844e32cc9", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776731420, "uuid": "d1fe4768-0b9a-4ae4-9307-7cb658225038", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776731420, "uuid": "d58052b3-aaac-436c-a980-109d012c592f", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776731420, "uuid": "6eaa3bed-504c-4b8a-9b61-15607dbc9761", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776731420, "uuid": "0039464c-176d-4188-8425-9d0f4cc1f7cc", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776735010, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "9c56caf6-6945-439e-a532-45ad6b2fdbc0", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "175092b9-5625-475a-bcb5-c9ea365f91a9", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735010, "uuid": "f557b178-66df-4b8f-8fc4-04bacba19ba1", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735010, "uuid": "e33d9408-399b-4b95-a94a-1275b8ee7e99", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776735010, "uuid": "dd515c42-6ca3-4053-9025-d7c0bdb589fa", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776736090, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736090, "uuid": "3a86b117-1fcd-4446-a714-636102d37c69", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736090, "uuid": "b397b763-6e05-4701-b0e0-599dadb4df9d", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736090, "uuid": "4970b94e-cebc-44a4-9f7d-8481966cdfdd", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736090, "uuid": "d1f0801e-a1ca-4c8c-8ffe-75957d5cb0d5", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776736090, "uuid": "0e90e386-9e76-4cfd-8c6b-6465cfa409b7", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776736330, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "4bc92997-2047-4682-81b9-b23d3df33d32", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "dc9b42ec-4820-4f00-84b1-c7294f221e8a", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736330, "uuid": "a8866bd9-75cc-42c0-a384-171eb1c575af", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736330, "uuid": "02360f2b-fc58-420b-a9a3-cb0b56f69093", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776736330, "uuid": "f4d1994e-a97a-4cee-8165-95f39c1e7c7e", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfaa09da-3d2a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776738977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776738977, "uuid": "1baaa902-9f0d-4a66-a9cf-1ec3ef2c4af6", "comment": "Malware payload (Mirai)", "value": "f7c3496459201d55f3b3e697220c81ce", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776738977, "uuid": "8758370d-4211-4de4-862d-584091d4cc18", "comment": "Malware payload (Mirai)", "value": "09d57b8f45e25f9f161470dc2853ed2a41986721ee7b919a7d33c8286dc30c75", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776738977, "uuid": "f5ef11ca-87e3-4911-9072-a7e7a11fb945", "value": "T14F3317C4E903D9FDDC5619712137EB328772F13B1029EA87E7ACAA22AC46B41D4472", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776738977, "uuid": "28fe426b-d080-4483-bc09-9e7f6ce1b35a", "value": "1536:O13kynNjv6czSEZeLmI37KNCgoT9poQzWxS2RAfah5jQ:AUyntv6cuEZ437KAgohpoeiSi1D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776738977, "uuid": "4407b7ce-7149-429d-92b4-36cfbcf89411", "value": 54864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776738977, "uuid": "f56b32a2-d2c9-4148-80c8-8b1792ceb73b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef78dc90-3d3b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776746305, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776746305, "uuid": "d43e334b-a8d4-469e-957e-644d776c2926", "comment": "Malware payload (Gafgyt)", "value": "756fa1a6e6600a7c80746716a7a9b721", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776746305, "uuid": "8de67cd1-beef-452d-8dc8-70fb38d482f3", "comment": "Malware payload (Gafgyt)", "value": "b8703680ccde02b1cca07d32416df55bba3e971030753dfb5cfbebb4ddb3602e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776746305, "uuid": "0c63c060-1ccb-4171-beef-02d93b3b1927", "value": "T1FFC36B13ED614F57C0835EB165E79A340F53F8E64F431B85A12AEAF45A43DCEB809B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776746305, "uuid": "772773f9-f4ca-4c34-84f3-5546b0a33592", "value": "3072:GIGAGxYNUCLA2zSOu5hpp8vhntmQpf6KFIYnT5W:FuxrCnSOu5ho5ntmQpf6KmYnT5W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776746305, "uuid": "c7dfb5c3-88d2-46a6-bba7-50db90c18d14", "value": 121946, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776746305, "uuid": "8acc6aae-3ff3-4b58-99eb-2cd05a51f330", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f33ab51-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776747325, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747325, "uuid": "ec2583d5-2819-4b9b-a576-589d795c38c3", "comment": "Malware payload", "value": "ea80b8c007d8df95aaf17abf5534229a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747325, "uuid": "6263e37c-b84a-492d-86eb-cd7f806b438c", "comment": "Malware payload", "value": "ce2d6739ae6b92fb8a143186a132e0c23a0607c36acea5f7dd99a3d450973f28", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747325, "uuid": "f15695f1-95ce-4744-853a-e50a4f99c384", "value": "T15134E088E484AF4D09B822B80DDD7868B1CDD1BBB6B5E54571406937EBFC23B85E1F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747325, "uuid": "fd3367ce-20c2-4d32-8b02-18b8dd4831b3", "value": "3072:F2+icm5b3png/LA9GYXkXYCL7H5YbBfsMV4aQ2vqApDZznpyq2kd6jzH0NVl:IcebG/MXkXYCL7ZYVTDznpyqFkjji", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776747325, "uuid": "9306a57a-1d71-407d-902c-57aec6f6a2b3", "value": 247895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747325, "uuid": "84a09814-8a13-4591-880d-a7d809dd126b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8022378d-3d27-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776747403, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747403, "uuid": "e29124e1-5862-4b67-9a34-326a87c7a784", "comment": "Malware payload", "value": "7fa9738b64f3acac525e38ad27c752e0", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747403, "uuid": "fa8d28b1-ccca-40c0-9ee6-16e5d08232e3", "comment": "Malware payload", "value": "b751bf0112aa1bfd0f56a6bc55967a762a4b25b2c183bffbcf4b42d476def774", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "ScarfaceStealer", "colour": "#660BB4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747403, "uuid": "517d887f-e763-4f26-9b2f-1d0713bcbd15", "value": "T193169E1BBCB91C69C09AB13484777605F665B8041B2317CB1AB0F6282F7B3F25ABDB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747403, "uuid": "738db825-728a-4cd3-b91a-b9b903886508", "value": "49b6e05e46e74288ba13e83380a9921e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747403, "uuid": "8a3c782d-1326-48a1-9b8d-acfdcff6b3cb", "value": "49152:/rzVDjHTfVHL2xIaZGoh/t/OUXEI1dQShmsFh6IwhyGdjMOQcQbHbw:/rzrIh/rFd3JwIXQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776747403, "uuid": "355cd77a-93ec-47c6-88ce-e431ab477c37", "value": 4320240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747403, "uuid": "81668d33-b811-49c3-b744-07186fa9c8ad", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8340a952-3d40-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776748271, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776748271, "uuid": "52327460-96c5-4074-8805-6e1d99711cbd", "comment": "Malware payload", "value": "d3696aee577470b1e2a1576e77187382", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776748271, "uuid": "9f41196c-33b1-4d04-aafc-9c3236fe8141", "comment": "Malware payload", "value": "1aad1e62af8bd5084f4469d05eafe9da4c231fc8d806dca434c886992019ee74", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776748271, "uuid": "9aa029ef-abe9-4918-acdc-ff1ea88e6f36", "value": "T11C8308327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776748271, "uuid": "2d54da1f-fa77-405d-9b15-9d710a164b9f", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnMWaBVN/:XEKltp9txAX/yr2pbMWcVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776748271, "uuid": "c3e903a3-12bd-49c9-890f-88d5a9a7cfc3", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776748271, "uuid": "9a3c7d1c-31b1-42d3-a1aa-7ed3345cecf8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cd9cd12-3d48-11f1-bc00-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1776751669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751669, "uuid": "578d129f-db2e-49c1-b6d0-c72fbe2e9c3d", "comment": "Malware payload (Adware.Generic)", "value": "6d6f5945238db84d13a44f7d790f383b", "object_relation": "md5", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751669, "uuid": "83e5bfae-4552-4612-ba60-517361add3c9", "comment": "Malware payload (Adware.Generic)", "value": "d181fee3f2493b3e81b0b678f040ec619b041973b567c96cd5a7b543abedbe1a", "object_relation": "sha256", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751669, "uuid": "699ced5b-d2f0-42fc-a77f-fe80a9cdb968", "value": "T159A6223FB268A53EC9AA0B3205B38260997BBF51681BCC1E07F4685CCF775601E3B6", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751669, "uuid": "edff869d-3039-469d-91e6-2f6867de786d", "value": "e569e6f445d32ba23766ad67d1e3787f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751669, "uuid": "0288877f-b6cd-4802-8584-d8735a52be5e", "value": "196608:m/vcniHmYVxqBm0keReFhmO8vt0N+Fucjrh9IN9nWrna0K9:UcnKHUeFhmOo1Flj9W3naZQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776751669, "uuid": "67020d89-502b-45fa-9447-aa1fd0ab9e77", "value": 9518194, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751669, "uuid": "0a2ee605-cf79-4ea2-9e49-2861aff1e377", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a6a69c1-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776751987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "50ac8d52-b39a-4b73-8fe3-a46ff24e6b26", "comment": "Malware payload (Mirai)", "value": "78ef472c93dd74bc8fa946c9f535c9d6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "8de3bf96-8250-43c1-b262-ee879bd7b58d", "comment": "Malware payload (Mirai)", "value": "b3b8cc9c3584a5613cb386adac2a3107fc8c3d714bf7db3c8c479fe69774e43b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751987, "uuid": "982c3c92-c574-40a7-a047-c77940071ef4", "value": "T1B251638673918834EFB25E9676B5C404B580E1526EC1DF4AD2ED78E9A8CEF083C507", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751987, "uuid": "15460343-612a-4e92-b825-e47ad34691e3", "value": "24:vncjOSnz/aIOSnNLOSnjjOSnFbOSnhTQhkaUoOSnK2oOSnlrOSnjQTOSnHjOSnTZ:vKRDRBRfRhRlSRToRRRuRDRxRz5RAR9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776751987, "uuid": "78bd4912-c0fd-4f42-8bf7-4b071d75d920", "value": 2751, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751987, "uuid": "7ecc79c7-45c1-4c75-a2ec-823ad0dd5f76", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d94c210-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776751993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751993, "uuid": "256dfa01-836d-4c67-be83-3f3a4fdfc44d", "comment": "Malware payload", "value": "e5922093f2817c175f010ba2aad4d7c0", "object_relation": "md5", "Tag": [ { "name": "Convagent", "colour": "#fce62d", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751993, "uuid": "8021451d-5184-42a1-89ad-82df818d4ffe", "comment": "Malware payload", "value": "fbcc4d90750e4ebf19616d044e8b634d1e82fbe467ae4bb5404532707bd6061d", "object_relation": "sha256", "Tag": [ { "name": "Convagent", "colour": "#fce62d", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751993, "uuid": "122431b5-47f9-4904-b10e-7fb731954c17", "value": "T142971212B6C3C136C15D0177E969EE5E1938BE730B3102E7B7E8396E59F08C29679B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751993, "uuid": "6032dcd8-19a6-4da2-8162-88e728a37e8e", "value": "98304:kihTy/5hneCspPdctl9gfC2gWqL1rucZ9cBaM/rBvi6RaWiskLDWqq/ZUGmK:u1eDdSCfC2r+Q/Ba21i6kWzkLDHISNK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776751993, "uuid": "59df921f-d8bc-48bd-ae44-99c60503f22e", "value": 41583497, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751993, "uuid": "5b097702-88b6-4ea7-b898-0172d71a3c44", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a2d7800-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload (FrostStealer)", "timestamp": 1776752014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752014, "uuid": "4272cf7c-4c00-4acc-818f-1c2e5039dbdb", "comment": "Malware payload (FrostStealer)", "value": "547b2aaf0bf80f846e2f0c1ea166ed94", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752014, "uuid": "95408c36-fb56-420e-b586-8ef0c969b4ea", "comment": "Malware payload (FrostStealer)", "value": "07f008e9ebfb33b2ef8a7f9dcf1f27bed1687359eb321044db47f9ebf70ed129", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752014, "uuid": "11800808-f1af-4daa-abbf-dc7df7209afd", "value": "T1EF28E01663E112A6D577D138C79BA203EB72B40713309BDF729C03652F63AE45EBA7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752014, "uuid": "9f5f415a-f8db-43dd-a8de-79a6d507e026", "value": "9eba512b03d8cac8a6c4424e25e9f06e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752014, "uuid": "689d8504-27ef-4cde-8992-0a693b5fad6f", "value": "1572864:lVDG5MiP2aVxUXx2XTnpOuQ6VVJnBgt1F+6DudYaux4:lVDG5NVyx2jnpA6xnBgt1F+dOC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776752014, "uuid": "07f4006f-bbad-4ee4-a408-decbcd828dfc", "value": 95714544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752014, "uuid": "67b1edeb-a971-4ae4-bc89-8259e745a9ab", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "516d36e2-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776752053, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752053, "uuid": "f6e689aa-8590-4f98-9dc5-bf7b02d33833", "comment": "Malware payload", "value": "8b7cdc126b9627c50aabd73323a2ea10", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752053, "uuid": "8b5bd3f7-c926-4bc1-8f8a-985ef33d7b6a", "comment": "Malware payload", "value": "6f6b6a20ae660f5273551449be66fbd346c95919845ac12e34a427c4abc9f64e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752053, "uuid": "4fc2016b-2c67-4b71-999d-59bfb13f4d77", "value": "T1AF844630E86E1ABC88DA3D20624B154FCC7C758F38FF85B7AD57243EA094215366D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752053, "uuid": "a3b2e8ba-688d-4eed-af48-4efba016fd94", "value": "6144:ICzgCPEiU4GEHB47trN2XgAn43gPqd55iK22tHOvCedVpnBYfDR:ndimh4VG4Qid5srRv/VpnBaR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776752053, "uuid": "e62cb240-7d01-46a5-b214-3b296d407619", "value": 373648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752053, "uuid": "e9ad2a0c-08fa-4800-9508-99b3ef0dfc47", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73f2fcb9-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776752111, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752111, "uuid": "7d8ad2cf-b03f-4f21-9a47-cd1901c5e8a6", "comment": "Malware payload", "value": "43d696a8c44d70e603b2b62a61f1516b", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752111, "uuid": "96ff77bc-3fc2-4578-a2d8-6247418523db", "comment": "Malware payload", "value": "9c24e2be51f6550733b734f26122e98b955e053c539242f9eaaf8a2dfc5b2150", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752111, "uuid": "7dd0c2f3-b79b-4508-b379-481096afeaf4", "value": "T19BB4233AF18C9F569A3D2D3DB7A06AF99083BCA14022A5497609CAFD790D135C9FF0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752111, "uuid": "12dae39c-d976-486b-8024-b77dcf59e1b3", "value": "12288:szjA7+6pjTUCa4fvHtDMl4P+GqSRr/AXEL6sBJ:MAphaOBMZyr/YEBBJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776752111, "uuid": "ffdc354b-8480-4d17-bffd-d7367d80155c", "value": 507456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752111, "uuid": "0ee547c4-9abd-4b48-b6d9-5ca4eeafe04e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bae99f31-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776752230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752230, "uuid": "8ff95e18-1cf8-4289-9144-b6653bea5ce7", "comment": "Malware payload", "value": "8b322526ea2eb8f352895ee04a8628f1", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752230, "uuid": "e6f13b8a-009b-4708-8081-06110978e840", "comment": "Malware payload", "value": "4c231d4a98fa685fb3023499bfd1d08407d1e2ae46cc0b0ecef34991c75a8e4c", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752230, "uuid": "b6dca3e8-0a8c-4c8c-90d2-4bf261edb9b4", "value": "T1B7030275D143EDD9F812223E2D48BAAB80999531B0C90DF711F47AF45A3B583D623B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752230, "uuid": "d9315f9e-25a8-421e-945d-9140e47030f9", "value": "768:XdH7iShtFu6T047Q0dlltUd+yihRIKnckiBc+75fDaBkzZZBB3RMt2:NHGoFPTXdllty1UupVZBB6t2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776752230, "uuid": "af99a3a5-52df-44f0-a76a-dba4f1adfea5", "value": 38550, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752230, "uuid": "e4a58649-7b57-4b91-bb5f-d57b69701a24", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ff944fa-3d4b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776752829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752829, "uuid": "65c9b2fd-42f2-4efd-ad08-7bc141824fc3", "comment": "Malware payload", "value": "246ee64d2b54b9bfd466b11aae250ece", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752829, "uuid": "742004c6-b7fe-4fef-8f66-d75bedcc34ab", "comment": "Malware payload", "value": "77e3fe7a36b507a8feb43bc6164a16c9bd13e4ff41f7accf287dac6c96814ceb", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752829, "uuid": "a6899e6f-94ca-4dbf-b4e3-829c9d778dca", "value": "T1E4E323EFD22B51FC3DD4614AD6684B1F0927670787E1365080086A793A63B27F2B70", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752829, "uuid": "e377f003-608f-40dc-a888-e3b43fe863c4", "value": "3072:p4UhK2Y7zvwe7/VeN7uo77zfEnPx1Th/U5hADfpIneibNaIr1teow:+wK2YzvdoNqo77AnPHTh/uAzpIfbNNrK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776752829, "uuid": "8c392b03-fd3d-4b36-9484-cd6ea1cd7eab", "value": 147968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752829, "uuid": "b74074f4-c8ed-4f2d-9678-fbf942c3fd72", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eee4e4a-3c97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776753087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753087, "uuid": "f1229a61-d55a-464d-b074-5225574fb34d", "comment": "Malware payload", "value": "bc094d073d900050a9740a15a01e3b04", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753087, "uuid": "d6386634-880a-44e7-8fbc-b38e4875925a", "comment": "Malware payload", "value": "650d44854e7be2fb8beeae72a1c500b61baf6da9fa1fae9258dc530ebf90e478", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753087, "uuid": "a84b97d6-b7ae-4978-8cd2-30532fb0b06b", "value": "T109C1626FC87B9CEB17E1806275B1FE1880874E1BDA494811FBCB50B57BC9AA005D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753087, "uuid": "10261999-cfd3-4400-936a-31265d0edb58", "value": "96:NTAKGWxLhdM4ggdvwuixp8n/81BCh1kkH/:VLGWxLLM4ggdYuixpI7ks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753087, "uuid": "3d13b8ec-3919-4544-9142-7d370889f542", "value": 5698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753087, "uuid": "ab9a2e72-ce92-4bb8-8f23-525efb351306", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39fd399f-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753731, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753731, "uuid": "db11ce0c-0441-46f5-a5da-652773927113", "comment": "Malware payload (Mirai)", "value": "b430762eb7e591cda892a148caacafa4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753731, "uuid": "eeacf734-ef5e-49c9-ba0c-ec87c860c000", "comment": "Malware payload (Mirai)", "value": "b684714154f55c587f44c11e2913eec31c04d9f9268b35a41d63de96a7147301", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753731, "uuid": "2e44fb4c-571e-48bd-8a52-ac78815352c9", "value": "T1573302A2676E6AE151B09777FC33BC5A56EC17E8986730D62CF0661977C08024EF27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753731, "uuid": "3edcc3ac-9096-423b-95bb-792b2ce08e91", "value": "1536:S9O/ZMAXIxNUk0W7ZLcPqF1aBexo4opKZbc:S9O/ZNKyqFLGqFUFd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753731, "uuid": "5ac0b832-94cb-43cd-b50e-491a294ea96e", "value": 52520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753731, "uuid": "db20a8b1-3c80-45c0-b1aa-12633d827451", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a038ca1-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "0ef0b220-2663-4a03-b64d-ac7545b6731a", "comment": "Malware payload (Mirai)", "value": "80f98a8860dc59aece9135239818e16b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "9c630606-3481-45a1-8415-5991acedfa77", "comment": "Malware payload (Mirai)", "value": "dc0853f8854f97de708998a5204d01b65d39184664ff9ec354182705a993da8b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "e8943d6f-26eb-40c7-ac4f-0beed18b26d3", "value": "T179E2F1A39371A052DE7837F6F85A86CE2B7D4FACC57A70B3160066282D9A0435F3C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "c60885fa-4cc5-4593-aca8-9039aa6f91bc", "value": "768:1oiWiO031vpAPbrVWZK3XVGxm9XS9q3UEL5Io:1orm1vpALgUJHLz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753732, "uuid": "5bbae4dd-550d-4fc4-ab6c-a890b419b134", "value": 33028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "f8327823-cfe7-49d8-a563-047fb6aff31c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a06cb91-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "c249c4ac-d52f-4cad-90ca-598bd51bbe6c", "comment": "Malware payload (Mirai)", "value": "9d542a60ade60f895c1d750ae2aedd5d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "5efc4bd6-f518-4c3a-ae7b-9e69f62071de", "comment": "Malware payload (Mirai)", "value": "51ca545ea4c1b659cd713f2e928bffe25922b4b61beaebc85e92da96d96d3fcf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "f31e1302-966e-4d1b-876f-d416055da466", "value": "T166C2E1E67E7B799BDF3500397499CE3696B0E021C7AAA6639240920C20071BDB7319", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "0cfc9121-4960-4675-9bc7-9a83e4753a21", "value": "384:MG1DMwk8JPyGYhDZREXVZVBy6sIye1iWLRYh4Sw4cGJYeRzOFGBzd8QNYTL8EeRo:HMwKDZOFbBy6sSHRYfeAxdd8yUn0NI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753732, "uuid": "3fcb7c7f-401c-4098-b6d0-632eba982142", "value": 28056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "c9efdc02-c60a-4b2c-832f-4e4f98be7f17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a078e18-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "0197651b-c5f0-439e-8952-8bab2bdd0c54", "comment": "Malware payload (Mirai)", "value": "5b057778c1b6d08263a6fd10d2ca3212", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "ae645580-1695-4b10-b104-409a60e00a2b", "comment": "Malware payload (Mirai)", "value": "bb5cef7936de6236a71c68f55bfdde3ba7031564b973fd61bd14520077f6e124", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "7b5267b8-a294-4c8c-b4db-d1546dde9a5b", "value": "T10BC2D084F041CA45DFFA69F12D40DADBFBD06F1EA9628E8022A553D19F9D3638306D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "2098ad38-658f-4c80-9aa4-afa4acd4f226", "value": "768:CVdafO76jpmNJJKehmA7trpfIX9KeA7Pvh54uVcqgw09C:mam+AnKehPRa9aHh54u+qgw09C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753732, "uuid": "2fe8d132-fda9-4d97-8950-80ead66c74a5", "value": 27048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "6c068815-305c-4d94-9d80-6d768e54fb0e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a08280c-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "38cc1def-e290-48c9-b034-c3a990d9aabf", "comment": "Malware payload (Mirai)", "value": "65e472a60f56036241614be42ea83128", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "fd2d101e-1919-48cb-83b2-a233a1b61a33", "comment": "Malware payload (Mirai)", "value": "63e476ac8c537dcf90705d87a267d88ea4c4046fb9f5ac8a63adb1687b563b90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "d9672db5-c7cf-47d5-9c09-2a0b7cb70697", "value": "T12AD2F18D76D3A3FA8C99C5BE721F0036309A34A9B2B29317B306D4434776181E686D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "3cf58e4e-a73f-409c-bf20-2ba138f99128", "value": "384:MPd/PxEDLd2TwM4zb6lowYcEaqsU9lcC450LQixBfE4jdlz0lewZ9W0raoAr2Nyv:0lxKd294CxEnsU96IHE4RlY99W02Nv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753732, "uuid": "6740119b-874b-4f71-9c2d-afef6fb46652", "value": 29456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "f3464779-c8e7-4b1a-ba77-961cc230aa39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a1244dc-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "f482f6b3-3415-4bab-a31a-1496e225b3dd", "comment": "Malware payload (Mirai)", "value": "4e380f5ebb2fa33e2691daa6e183d05a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "2d3d5627-908a-4ed0-b2c0-fd31a2d40c1b", "comment": "Malware payload (Mirai)", "value": "2f933ed96fab4c6f8fcc022593c482a20004657afd260a4d3b0b127631f395fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "2f5987f7-f85a-4258-84a9-a44b3c15bd1a", "value": "T138B2D1A487A15706C2B0F475A77C8F925A3B15E4D6F63D331B2092ACDA4149632FCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "6067cc53-0464-429d-a475-12e9ff4f3a6f", "value": "384:4GHKXlJIDFUS0Mggks3aIrokYVDoDDRRKj55N7LB9U+Bu8HxrqqhymdGUop5hu7p:4GHKQFH0rs3zWoDDRsjt7LB9U+Bu8Hx5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753732, "uuid": "4abdb2f8-1b20-4619-a689-3ff2e9eb5ea3", "value": 24536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "c9b785df-27ee-4892-8bd9-c504edace68d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a167d0a-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "0d05a2eb-8c06-444e-8180-1c29cc012951", "comment": "Malware payload (Mirai)", "value": "79d1d8804157031adcf8fc927042855e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "79655a81-4c45-4114-93c2-2ba7fbe37e74", "comment": "Malware payload (Mirai)", "value": "be7193c29d39c1715ee5755890ca08b084cb90f898141bb993a603fadc315853", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "06412764-aab0-4e45-aedf-62ecfd4b906a", "value": "T149D2D0ABF18BD0F4E5F684B5905820C0F46872AA5B2187FF485B62BE886338B5635F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "b6dce783-0688-4a8e-b3f1-69d19fcf8f3a", "value": "768:CYSoXdJZtUjkFfNJlVrQeHvPx2csGHEK89Sx0sW:CYJdJZGjkFV35/McrNZtW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753732, "uuid": "6bb38395-c875-408e-9a76-c7763f14a3b7", "value": 29440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "aaf1e8e8-7d3a-4c04-bddd-faa0dc991042", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a1bd516-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "9bd0b518-0006-457f-b083-8956a1c458e6", "comment": "Malware payload (Mirai)", "value": "d9e93fb41a40db0cb7a5ba19ac951302", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "d992cc2f-19c0-4184-9ed7-e2f66c33826a", "comment": "Malware payload (Mirai)", "value": "2f594939c4eba15b882a5f42753ad500af55c9abbd16b5d003c0ac538133b046", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "bbd7ccb9-136e-4785-8ed0-166429dfc97e", "value": "T18D536DC6B4119E7DF5CBE7BE44220D0EB821626150931B27BB6FFC83BD721A48956E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "c3711677-67f4-4b77-af3f-a68b42ced47b", "value": "1536:kPqRg0FZTbSX5xZLepSGossFpxhOx2X/ZOqc/yA8C:p5ofF8I9cKE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753732, "uuid": "c9c20504-b3a5-4a48-b134-deb3bde90365", "value": 66508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753732, "uuid": "1539d7c0-0b2e-4409-ba54-af507e2964bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "613fbe45-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753797, "uuid": "364db593-068e-4877-91ac-7dd790e11b35", "comment": "Malware payload (Mirai)", "value": "bff5cc3aa6b372bb4c9361470191af25", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753797, "uuid": "4523f366-21d2-403c-a2a8-0ea81d39f7c0", "comment": "Malware payload (Mirai)", "value": "791a9c988ac217254c34caf8f5d4d37606f0a0c0c7ea2ce95e54a664258b60c9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753797, "uuid": "dc210da0-df87-4b2c-a508-8c2970a6bae6", "value": "T1ACD2E02CDA4D7905C6AD3EBA51CE56B53C4C70C0A35DFACE17228458BA1BA9BFC070", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753797, "uuid": "85a870bd-5969-4bd0-ae19-8322cc7c84cf", "value": "768:D1uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KNPWABJbKWUA:DbDs06t4BEub4sU/MbUP3B+A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753797, "uuid": "fb7020bd-0e1a-4ff9-a1e9-35add9440419", "value": 30324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753797, "uuid": "4c63a7e4-5ed3-4a2d-ba1f-6ed58939b8d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6141621c-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753797, "uuid": "b3fe85d5-aa80-442e-a10e-30d5874a218e", "comment": "Malware payload (Mirai)", "value": "62bf49f0dc251e31e8302f4e4a5dbb55", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753797, "uuid": "6fd935ff-02f6-46ac-8623-53d3a253409c", "comment": "Malware payload (Mirai)", "value": "36815f60a710bcce0aacfbda8c764ebeae2c7f605ee76bd7ea8cc86814323c74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753797, "uuid": "0e0765ea-0861-4c4d-9aae-ebbd28a88632", "value": "T113539FA5C5ACAE58CB1441B8B654CD398723F408A5A76EFBD646C796800BEFCF0187", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753797, "uuid": "4d5e4d57-38c6-4516-9b5f-2f22540e0805", "value": "1536:PaAtVnz1/mUUNztiYmW6ihiYLTofs3wfpWIDNEJ7JC7:P/tVz1eUUfwN0T0f+whWONEJ7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753797, "uuid": "fb6bf0a3-1e99-45f8-b2c2-acd7fe64f800", "value": 63772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753797, "uuid": "f02c6b89-2b99-48e0-98d2-af54d2fb935f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61464f00-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776753797, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753797, "uuid": "ed7255e9-4052-4fb1-9f77-f6fc9693b1d2", "comment": "Malware payload (Mirai)", "value": "6b5311abbab07600042081f37f1355e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753797, "uuid": "0584edab-ff38-44c6-b60e-cf8b0c41c109", "comment": "Malware payload (Mirai)", "value": "26c923ffa4f40b3f99f58d4421ad96af2152a22ef2cb2e8d17ecf9ec1993b595", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753797, "uuid": "9c443e03-100b-4cfa-8694-79ddc0d036c2", "value": "T1E0D2E0B91B0B4ADFDEABC8F9C3E413A025650E129903FD4A71ACD7435B5B4C4A117E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753797, "uuid": "dbb2fcef-61de-4afa-b5f7-d9234104d815", "value": "768:3xMWBhAHuLegF1aF4NscfOl8liV7YJgGlzDpbuR1Jt:3xdBGuLea19acfjliJYVJuH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776753797, "uuid": "d839685b-e714-4e05-b422-fd941d7074d2", "value": 29420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753797, "uuid": "8da7f4d7-4371-4513-8f37-827cbff62a05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de3e8821-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776754007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776754007, "uuid": "bd01f3eb-0bd5-4954-8e9f-e9c2a9d037c5", "comment": "Malware payload", "value": "b0a131a99c837b05ebb5534c4c39044e", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776754007, "uuid": "ab67031d-d6dd-4fcc-9a80-25fe23a2f5c6", "comment": "Malware payload", "value": "a45b4e536306f14e660ce699153c4edd33006cac6a0461b66a099e508e4e085a", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776754007, "uuid": "c3bae608-2569-4ef3-bbb6-31069134b3c5", "value": "T1B6B63361EA5319F1C0B3783D3DC05BA36E58622D85B5E2E5FB881B5B3DE91B1522C2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776754007, "uuid": "06bc57a6-a4a1-4229-b88d-d07c182700b7", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776754007, "uuid": "4fa8e9eb-044f-4464-a1cb-c65c38dadd2d", "value": "196608:UPNumXT3Tzh5Y3ZxZUPp2WAL+gFh7KIYc2qI3W5yD4ElVSACKsBM:Elzh5YLZUkP6elYVqI3jkUi+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776754007, "uuid": "e5590812-3a5e-4090-ab72-abf622f3c4d1", "value": 11420160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776754007, "uuid": "3fa145ba-77a6-401d-8637-d0b3581ccdb5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ba0c462-3d6d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776767398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776767398, "uuid": "fa2a9442-b14d-4a95-8210-5e7434caf4dd", "comment": "Malware payload", "value": "91877b2dba16dd10f2a89cf3c167f864", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776767398, "uuid": "6c243988-1fb6-42b9-9f74-c0176a8e0dd7", "comment": "Malware payload", "value": "957b4fb1676f2be79e99211f384cd6a10cead286df4fd600bf25e332a1d29607", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776767398, "uuid": "6f588882-a81d-4895-b722-eda1fc9743a3", "value": "T17D82D12C214217BEF4F99DD238059A486E679B03E9267340C32B15F2E3BF0392D394", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776767398, "uuid": "aa55e4a6-2c27-4c1f-b524-30c8cfc31b78", "value": "384:cfiIMIvMuUCaBm9DcbozqKDAqUatHEIzMdeGbJVQs9fwOqGk:cfipIv5UmibozqKDAsMdeG3Tfwr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776767398, "uuid": "ce09efb9-1ffe-4377-984a-061cff1d9713", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776767398, "uuid": "e7a7e4a3-83aa-47e9-90f5-f386443b4c19", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16734bfe-c902-11ee-b9d1-82aee05be84a", "comment": "Malware payload", "timestamp": 1776770055, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770055, "uuid": "9c362884-aadc-4965-975b-55736effc49a", "comment": "Malware payload", "value": "3a9349af006440c7e0da677724551239", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770055, "uuid": "1d244364-8b8e-405d-ab19-fb0cfe68b2dc", "comment": "Malware payload", "value": "00401651af3194ede5157004b6dbe1edf836a94ca182221f2c034201fe55e4dc", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "AV.lnk", "colour": "#072ce5", "exportable": true, "hide_tag": false }, { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "ink", "colour": "#552ab6", "exportable": true, "hide_tag": false }, { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.lnk", "colour": "#d92883", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.lnk", "colour": "#d1c6ca", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776770055, "uuid": "91e60e53-7928-40e0-8fc1-456d1a13d74c", "value": "T13C41E2019FE70B3ED7264234AC76A251533B7555F8965F8D9040478404B3401916CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776770055, "uuid": "74d03c90-57a6-4969-8247-200ec18a7751", "value": "24:8NqDOlC82vUKJU1+IMJ941y2bY6HoIab/C8fn1vURXTUmu3+IMmmt:8aVnvZJUdMs1yE3HVabhlUymu3fMm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776770055, "uuid": "29a1c320-aaa7-4a9c-a4d6-b0896330d9ec", "value": 1952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776770055, "uuid": "018ae98b-5d1e-4ed9-8f3b-49b45014d031", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db0646b9-3d74-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776770752, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770752, "uuid": "64ac74be-a3c8-4b7d-8666-1f6e65dc2c15", "comment": "Malware payload", "value": "4970660088b9e2f87839d550bea68211", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770752, "uuid": "105f497b-8a8a-4c93-986e-a138fdf88a38", "comment": "Malware payload", "value": "7615d9ac4b347bdf957c2666d195f48a308cf1a55ae734521a3bf379d4d0134f", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776770752, "uuid": "8846ef82-f9b9-4dce-8425-994f9e2fbaf5", "value": "T1EC6533E014D955EF09DBDF5829447B2EB6F3940EC137A951E04EC2E2D2CBC7C9D865", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776770752, "uuid": "dbfa336f-c6e3-44c1-a070-19b5390e6e7c", "value": "24576:BIoq/7qWjXIbfIYOsfNxslr8pGpWN/+/2ThM2axb1PsAKFke3UnB8BRBJeUEt0Gw:By7wZOsDPGpWN/kdxy1+eQagF2SSD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776770752, "uuid": "6fd9c873-8f03-4457-8ce5-2b6bb811c9f7", "value": 1519426, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776770752, "uuid": "d31f00c1-6cef-443f-bef4-997a588b7c78", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8caa9973-3d78-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776772339, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776772339, "uuid": "9838a81f-a625-4030-9d4c-cfc4d4536713", "comment": "Malware payload", "value": "682a55ac866f00ca57fbc75a30ea6ec8", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776772339, "uuid": "ca90ce36-89f6-4a12-8a2f-404494789293", "comment": "Malware payload", "value": "6ac8d6c523ae188f5b1442a0417c1f9940d23df98c3d5130181c0c171a8a166b", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776772339, "uuid": "56d92c83-2671-4b2c-809d-08280d40b53e", "value": "T14D04E0E3F220027BAD78D9AF7A1559C9506DFF1143E020B2A7CEBF91586476AE0347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776772339, "uuid": "9ba2eec0-110d-4cf4-8e45-329ec1af81ff", "value": "3072:uPZchfzapbKlmkPaZxuWFPJpTIbtbkUjElQIPkyR:ooaODSZZnv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776772339, "uuid": "0e23f9bf-c506-42e4-8843-495f2b4f80e9", "value": 176374, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776772339, "uuid": "59d399f4-8a01-45a4-8031-c46ccd5d6951", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19405326-3d98-11f1-bc00-82aee05be84a", "comment": "Malware payload (DeepLoad)", "timestamp": 1776785889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785889, "uuid": "6ffabd3a-5e66-460c-aa6a-5f3697d70506", "comment": "Malware payload (DeepLoad)", "value": "92d42d6b836b592e9266e79e2796ca6f", "object_relation": "md5", "Tag": [ { "name": "DeepLoad", "colour": "#78e8ae", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785889, "uuid": "e0f53a8a-ee16-4b04-b40b-1f8f2354ad52", "comment": "Malware payload (DeepLoad)", "value": "d344a9b2294db5f32e9726e4edf8d65149566832d9f5c90c6581cdb97d4e62e9", "object_relation": "sha256", "Tag": [ { "name": "DeepLoad", "colour": "#78e8ae", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785889, "uuid": "341bd81a-9dc1-4450-b73c-07bfa24f3429", "value": "T146967C07EC9115E9C0A9E63486669253BA717C485B3133D72FA0F3782F77BD0AAB97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785889, "uuid": "7feaf7a4-918a-40d0-9f22-c27d0f68cb73", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785889, "uuid": "448c6fd3-beb6-4075-98a5-dd89066947cc", "value": "98304:Xfde5NbjROl5YhbSoYwEtfNK73wklaIjNXI1MkV33osiE:XfabIl5YhSoYFfNU33lHjN4CkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776785889, "uuid": "f412d2df-b0e4-40e9-bf45-29aa48bb4959", "value": 8703488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785889, "uuid": "0a35d6a5-3f10-4339-a025-de72558ad278", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc8360f5-3d9c-11f1-bc00-82aee05be84a", "comment": "Malware payload (PureHVNC)", "timestamp": 1776787988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776787988, "uuid": "4a9bc5fe-794f-4724-9285-7fd799a3d9dd", "comment": "Malware payload (PureHVNC)", "value": "8f3dba9ac51fd8a524b872c167557061", "object_relation": "md5", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776787988, "uuid": "76688624-3914-44a6-90b8-b0447e437cd3", "comment": "Malware payload (PureHVNC)", "value": "82cc7c21e9924c91a37aff292909ef6b142c1b6734eca5b0ea4d12078490fd72", "object_relation": "sha256", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776787988, "uuid": "02be1628-ee18-4dfe-9f1f-eb37fbc2de59", "value": "T1CB563337F0691DCAC06BD07AD0712B90C7E7231EE607987995A235E476A37CE88CD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776787988, "uuid": "c91c8e1a-66de-4835-83fb-74b9a9b348bf", "value": "196608:+Zft3ChppBYQQDd0uU+HB/OGUElH6XU8YYlbHXUH:+BNyfBYQ2drU+h/PUEl0U8YYlbEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776787988, "uuid": "9907271e-6edb-4e86-8252-72c9fa80f146", "value": 6351040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776787988, "uuid": "bf4a9de8-963e-4d04-a1b3-fa6727aa103b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cc44c58b-190b-11f1-8a4c-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776788708, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776788708, "uuid": "02d86712-07f4-41d0-86e8-5909c1dc828e", "comment": "Malware payload (Mirai)", "value": "917e4ecaf26683cfa36fda7899ce8e67", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776788708, "uuid": "d5ee238f-8869-47c6-b512-53aeac467386", "comment": "Malware payload (Mirai)", "value": "2967f78d71dc4c0f29f1a4b8c2dd40cb0a2db03ed09e4fb0c577e7f5ea0299ae", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776788708, "uuid": "2c61e5a7-531e-4ae9-b5c2-2ebae52a6de2", "value": "T192F3B50E6E198F7CF79987344BB79E32965833872AE1C582E16CD7105E6024F641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776788708, "uuid": "b470c041-20f9-46a1-8cbe-d43e004dad2a", "value": "3072:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJBQX/uw9EfszRpSP/Q4vkTTzTT4BFZDiwZ:MOATXjpCgqDJHDexBJKfjPV4kuMu8hJH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776788708, "uuid": "e3c9b962-2478-48b1-b0f8-f165ab16b588", "value": 171724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776788708, "uuid": "c52554cd-9de2-4e95-be44-d27986588828", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8883221c-3da0-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776789511, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776789511, "uuid": "c9365245-7c9f-4f45-8ab1-e07131ac89ee", "comment": "Malware payload", "value": "d15effa2bd7e3737fb17ee4d2f66c901", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776789511, "uuid": "5f527f8c-e1cc-4cfc-ab67-944827f91551", "comment": "Malware payload", "value": "794844969d009eac749525c0dcb9abf95b3206b9f79c677af3a39e8a03c8caa7", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776789511, "uuid": "b558f3d8-11ca-4d39-975c-80dbf9c0889b", "value": "T1C993E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776789511, "uuid": "0fb68f76-e2e7-42cf-8f1e-55a3e18dbb02", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXUIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776789511, "uuid": "e1018d0c-90f6-47cc-846b-0cf2f765a94c", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776789511, "uuid": "67034570-5889-478a-b6cc-b0e0a9b04fa2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "664d21bb-3da2-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776790313, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776790313, "uuid": "534a856e-886f-44a1-b3d3-2c40aec99d22", "comment": "Malware payload", "value": "c3f25b7add18e372121eba28d9004bd7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776790313, "uuid": "af34b521-36e1-49a0-b425-589d7d5d1895", "comment": "Malware payload", "value": "cbe4acaf326cb6100d16f715c1536e443408cfbdd755e647b1bdc19c0155e000", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776790313, "uuid": "60d0f5da-23e7-4ccb-80de-e630664a39e0", "value": "T169931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776790313, "uuid": "bde92cba-9782-4560-a77c-80806d000b8f", "value": "1536:nByp1tF/uwMmAIa14oX/KIMepeV7tb73WdxCrCitkb5fv2v05xWjrIK1/s1kKdrW:n8JIL0GitkbFv2v05xWjrR/s1kCrty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776790313, "uuid": "4c97c10e-62a4-46e1-afb6-7d3d9b200e2f", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776790313, "uuid": "6e19df7d-92f2-4eb5-8773-6d5d003269c8", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "899b5304-3da8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776792949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792949, "uuid": "7d504a14-8811-4a66-8374-95cf4107aeef", "comment": "Malware payload", "value": "0517e51c9b013ec859071f0f2b6e226a", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792949, "uuid": "2ee91af4-87a0-46f2-acdf-9032e6d890d2", "comment": "Malware payload", "value": "3b8ffdbd3281eaa865455a00519c2e10672b73b65fe4fd44c3a4c78f5354cb75", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776792949, "uuid": "cebb337a-bb5c-4b37-b314-e8626f047343", "value": "T19C82D051BA5D477987ED08DE2E8214324D53BE4AC19F560BDAEA3C21D2A723847C8D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776792949, "uuid": "0759d6c3-88d7-4070-a5b4-98b7e7a7a47d", "value": "384:UHsBWDHWAEK4fv8qOGZxB8YM6365xr7yt/sXMzD+za:k4RAkv9ZzS6365pmt/sXMzCO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776792949, "uuid": "0095a9ae-b6e4-428e-8762-9ae58c544063", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776792949, "uuid": "ab33f889-eabe-4ebf-9760-1879e33e8ebc", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1b20930-3dab-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776794359, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794359, "uuid": "013f9270-3a45-4354-9a12-b7492fd59b84", "comment": "Malware payload", "value": "2c462ff95324bb80620664fd41b5aa3d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794359, "uuid": "1871eba0-11b1-41cd-aa4d-e183427069c9", "comment": "Malware payload", "value": "e4a6321f3957d55c80852b531217359da4d99c08fdb55bc20713addbac02cd0c", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794359, "uuid": "f7bc4802-2b37-415d-9682-1ecf0512cdf4", "value": "T1538308327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794359, "uuid": "dc250560-6a93-4735-a54c-03f236257a5a", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnPWalVN/:XEKltp9txAX/yr2pbPWsVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776794359, "uuid": "95bb5c3d-d629-4fa8-8e0f-10c96b1bedb7", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794359, "uuid": "d81f75d5-e4b0-4412-a403-a4cdf2cdfd69", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "10bf105a-3dad-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776794894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794894, "uuid": "46af72df-4bf5-404c-a22b-51b1d74979d4", "comment": "Malware payload", "value": "b8d60a542ee2d256c4ab7607b4de5501", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794894, "uuid": "7254bd2a-1956-45cf-ac89-0481660f3ad1", "comment": "Malware payload", "value": "b220c7c3c18865436f77e8a6f4b0c31a4c89747a7b713df2a80b3aa489dad65c", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomGate", "colour": "#2fdd8a", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794894, "uuid": "4e6b4bfa-b595-477d-b935-3d65c68ec67e", "value": "T12952EA7DE5E1BCC4879B22C179D9F7C2118F8B13BE6B1B2CB5C806905B50365AB785", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794894, "uuid": "b7046890-598a-4cf7-8bd2-473d8e639cc9", "value": "384:w5pgw4MPumhmMzsTU79XqqcP22TfQKhHj9tPz:QpZVkDP22ToKR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776794894, "uuid": "29c14f48-f223-49ef-bbe1-92f487097677", "value": 14191, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794894, "uuid": "44c00572-4749-4313-99d3-202e710529b8", "value": "text/x-msdos-batch", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "750d3336-3db4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776798069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798069, "uuid": "483cfa3b-573d-4c6a-adab-6be39d922134", "comment": "Malware payload", "value": "a54b7050b8025f4acca0e89533b3c385", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798069, "uuid": "78466754-3a47-4469-bb72-b02aff8959f5", "comment": "Malware payload", "value": "a0f798c3cc02dd39dfa365a098337f22c395f8889a9634368105af98b4f5c3c4", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776798069, "uuid": "ca4aa491-1f8d-4cab-a860-4b905160002e", "value": "T190159EB73E516E5B4DBF0994E0140B054C7C5887A7A8C1F87BC1F4B722AB4448ABDA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776798069, "uuid": "ad3ee133-1e30-4117-aa35-33b45f586688", "value": "12288:RtN/vkHUUiC6BLwjZRu5ZcczIs4KFO/K6oHvkhYvUeauZk8jjrDzFg:RoiC0Qcc/yyXoHvkhzeauZk8jjrDW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776798069, "uuid": "d8130a5e-194c-4915-abcb-d73fd1c21fbf", "value": 885984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776798069, "uuid": "aa8674f5-5830-4e5f-9ac9-72f000e0932c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "758ad0d4-3db4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776798070, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798070, "uuid": "e67af2ed-97d3-4c8a-ab4b-ff68f5ec2c14", "comment": "Malware payload", "value": "fbfa3fd022174c4b8ec48e38e95d9b59", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798070, "uuid": "36f94d4b-f539-4334-a16a-98d41d907b20", "comment": "Malware payload", "value": "11e30093c3aa4efc4d4bdf01b6e40a8856bc5059fa289e6556af9576f1db2b70", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776798070, "uuid": "a9f9f9cf-1f81-4a51-948f-7c5005fe5cb7", "value": "T16F153AF5B31B7365A9FB9F10C4051B4ECEBC51C3E6810AA4BEC5EE65587E20E40BC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776798070, "uuid": "37569def-cacc-4f64-bed0-c5b3330174c8", "value": "24576:SmVmNtVw7a/kDjgh8kzYEEwzMM/H2fKGzSSSSSSSSSSSSSSSSS+SSSSSSSSSSSS/:sVuavPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776798070, "uuid": "dd1034ca-74a2-405d-a6c7-50cc527fafc2", "value": 927352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776798070, "uuid": "13b8cc6b-b10e-4f2c-b4b6-562f2172ac62", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776802219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802219, "uuid": "4d481e62-f2bf-48dd-aba8-6ac185e20a3a", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802219, "uuid": "4fc9fe5a-b0a6-406a-93d0-d15384c24ebb", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776802219, "uuid": "047429ef-bd4e-419d-a30b-833f1e887ecb", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776802219, "uuid": "1d72374a-2120-4d41-af45-91f0f9d3c8fb", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776802219, "uuid": "39abfd1c-7047-47be-aac9-c31fd31b59d2", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64fc553c-3dbe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776802337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802337, "uuid": "fa5d9237-d7bb-41cd-ae5f-34a5211011d3", "comment": "Malware payload (Mirai)", "value": "9867c017d2c369841c65739f9d253b81", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802337, "uuid": "665f030b-b8d6-41a3-add1-69520b8311d7", "comment": "Malware payload (Mirai)", "value": "cd12071a4e39313ed81a386235286ea95a3ce8551087a8058f231995ea217f54", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776802337, "uuid": "53dd3447-5b87-4e8b-9624-9171f877134e", "value": "T17983C61A3E218FAFF32D827547F74E31965872992AE1C688D17CFD412F6028D641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776802337, "uuid": "b616a79b-74f3-4cc4-98c4-c7b0518cd4db", "value": "1536:SPl0Z7DjPoIrWt5P1sf5FDOal2S8KmXKfd3MNQxeR5s:T9Wt5P1sf5kal2S8K0KF3MeeC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776802337, "uuid": "2c5ec7af-4c60-4044-96f7-c354dda925d3", "value": 87396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776802337, "uuid": "7f4ab937-c2e0-4b73-875d-8fddd48c1616", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aafb3c4a-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "a83472c1-bdae-4274-bd62-73132d032440", "comment": "Malware payload (Mirai)", "value": "8188bfd58f5a38884415fee36c799091", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "adda849b-6d9a-4fe0-abad-24acb82a645a", "comment": "Malware payload (Mirai)", "value": "10074a5e704b836b16d980098bad7388f4f1979cb81972df3faa3481ecad88c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "3f707b67-4dd1-458a-9161-d1fd16f7224d", "value": "T1C4F2F19A78BCDAD1EC6560B45F7C741F1585B128B4C880755DCCA237C7EBBD136283", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "a2f7a542-98b0-4d1e-a9cc-9ce4698b7a31", "value": "768:ZljX756mRPU4GEHt/NRbgzi7NfNzSe0x0VtnbcuyD7UHQRjt:ZNr5HRPU4GE/zzGmnouy8Hyx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805461, "uuid": "3dadcec6-a681-4434-8aab-31ab87736eef", "value": 36028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "eabff4ab-b59b-43aa-92b7-6cc2a3a1ae40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab019f84-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "5c1a2574-e1e6-4263-953c-a2acc5cb2f6a", "comment": "Malware payload (Mirai)", "value": "4ca99eba1e82305656f52b803eed88b4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "8689aee6-fe97-4ddf-b3d7-aa20f82d436c", "comment": "Malware payload (Mirai)", "value": "b4314c55c2b5cf84b3cedade40e79979382ec134426039d0187867b51a1a891e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "f2f24a4f-2bfc-417e-8c1a-696cdb170896", "value": "T1B5F2E126F2C4CA6DD06A6339057F7B0BD641935C655280E3BFD9FA9A486BB3032147", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "e2ca7c5b-46e2-4524-b772-91db97c4399a", "value": "768:cjprYXIyyg4saVS26cbdVc8A7/Yqz5G9nbcuyD7UHQRjj:cjpETv4s2T5m8ArFc9nouy8HyH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805461, "uuid": "92432946-697b-4f79-ac40-49da7b2b8498", "value": 35016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "94befda2-e800-43be-8bbf-21fc51be5e1d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab04c8ce-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "a2b56120-c997-4c35-837c-d8633a6ced03", "comment": "Malware payload (Mirai)", "value": "07f2e7af607d82544174312361da8088", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "19468aef-1ed6-4370-98ab-8491d6388dcc", "comment": "Malware payload (Mirai)", "value": "a2e10404778932f67daf1fceba3367bb7d9b9ebb120d019f98ad570f4825a76f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "9ee4bde0-9793-43de-a3ba-63fa6084a95e", "value": "T120530212A4EC5AA156F8AC75F66B0DC20A1595F8C0FDF1D246F0C534DEAF5A283B43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "0d6815de-3d42-402e-b08b-7e29ffebda92", "value": "1536:EqRaULyIfrpr6qtAHAb39LVe1k+SvL/A2pcVrHav6hv:EGQIcLu9JMkvvL/A2iVr6v6Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805461, "uuid": "318cb452-6b93-4da0-b845-41c50db09ad5", "value": 61980, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "03e29d84-4454-4e56-9784-1059728c3c45", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab053476-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "f1341ee2-4477-4aa4-b1d3-b4f9bd51ce5b", "comment": "Malware payload (Mirai)", "value": "4d7bd478c14a33ee0ad4a06a50191140", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "b9d276c7-222c-4f53-a512-8da215080e1b", "comment": "Malware payload (Mirai)", "value": "40ab56ff8c9cbcb06f85444c39b44bff6b3eecdb5ecfe5a75d46ed2374fa6da5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "28fe5886-5fa9-4fd6-96ee-6eb842bc4b1c", "value": "T1A183199AF800DD7DF80FD7BB4463490EB930E3910A931A3777A7B993AC721B54816E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "24c4f092-86fc-48a2-88f7-3f4bc72bf8af", "value": "1536:KRftiNZM0JRGdhkQ+73rIgDPrD0qVy7g8B4IQnHhON+h1HQohu1xgZq2PspVV:KReM73hMlwqVy70ZOchpGgZqBpVV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805461, "uuid": "1b4682b2-b9c3-42f0-8a19-875975e86be7", "value": 85108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "fad02797-eaeb-41a1-ac78-8ca99d422885", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab0f822f-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "8fd72295-ae36-46d8-845b-0c1bdd3b96d0", "comment": "Malware payload (Mirai)", "value": "9c77f01171eff53d1daef84fa0f5b607", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "6287fc51-f70f-4bb8-befb-d75408a67d61", "comment": "Malware payload (Mirai)", "value": "9f9d9888106c0e98b2914ec4ca274c2dd54ff321f8148abed1d9dc7b18cf07cf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "407dfbd0-6deb-4800-bcad-c5de4bd9ce0d", "value": "T197B3ADEBF64715A2C85243F013C79F8E3E232290AE57A4E76D1E177B19790CB1D0AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "33107f06-e051-436e-b452-34a1f546b43f", "value": "1536:NnQq8UA1GLckzizaliGTx6VCNbsp/xJ6bngHa/LW5:BQqJfckezRE0VkspWngHaq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805461, "uuid": "7364d699-05b3-439a-ac99-a6f0d31a50fd", "value": 115992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "7e4a50ae-d7dd-44be-a4e2-7ebffe3e29aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ab2137b2-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "d0095779-d79f-469d-b6bc-2ee05192a226", "comment": "Malware payload (Mirai)", "value": "85b2ac49ae22736ec9f2e8f5d2408cf9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "743433b4-0c2a-4f66-a12f-74c4d181d5a5", "comment": "Malware payload (Mirai)", "value": "70f7a057900d5285b58fa6dccef784e07db91b44fc676d82e7ede99e79e1caf7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "31ea0b7b-21c6-49f4-8522-69f224255b1e", "value": "T13392C0285B551810CFB50A76ED9E53C3F3954A3FD2F931732A080A7CAAD691212F4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "8054c35d-ee67-400a-bd04-1855049619d0", "value": "384:k1IN9A8xScYE9kAvVBdYKO8PaGPvSV5oWx2s9ghhHLyhymdGUop5hKF:keNCHcYEWAvHebVdbg/HLys3UozYF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805461, "uuid": "ebc9df29-ecb9-41e2-a6e5-54e6ae41bb17", "value": 20668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805461, "uuid": "a8f3f347-9f5f-46da-a4f0-230b47a5eb30", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abc4dc0a-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "fa3beaee-19e5-478e-a509-bc9f42b38fe9", "comment": "Malware payload (Mirai)", "value": "ce6f42918bd833c42390a681a93cc79e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "2a22b340-3e81-4eb8-a1aa-a166d395fc46", "comment": "Malware payload (Mirai)", "value": "9436991caf6979fdcf5b37ab9300fd39fda95b19960c1dc3f9c0dddec6321624", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "90a787ce-eb06-4202-b00d-943c1e1f2307", "value": "T151734C31F939192BC0D4917A21F74722B6F687CA21A8862F3D710F9DBF615403A47E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "ee34df05-ce42-47b5-b822-881cad1e9057", "value": "1536:IjPXYjriSP2PbyZlEPRtzJYm5is9Jsmtt6/bt:QGg9JYO592/5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805462, "uuid": "ce4dd744-825a-4c08-b432-346834605aeb", "value": 80296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "eee19f87-1f1e-47cd-829f-85b98d959c71", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abc5cb74-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "998bfcef-b4e9-406f-aa03-0159438a7c76", "comment": "Malware payload (Mirai)", "value": "e4b6ef94cd3ed3b02bd81cae2ce30599", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "131d2aaf-641f-4ae4-8f64-0afaea3f94fb", "comment": "Malware payload (Mirai)", "value": "a6e64017a27686771e2f8115fce3f6461fc9eb13ee1da0d50cbc3adf14fc2b00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "46af64ed-9d04-4b32-8af9-c28e35e816b0", "value": "T1DE03F1381E2410CCC568C9B5AA558BFA3A466FA360429A333D47BAD37A5F23130DB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "f1237042-7564-40e3-a39a-6dfd197b08e6", "value": "768:7dJAvi5nYhR/xjbJ6SJjpBGsHibnfdVdO0UBza++JgGlzDpbuR1Jf:7daihY3flInfHo0qiVJuh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805462, "uuid": "e0794a83-de3d-45e7-aea4-b0662c4ef5de", "value": 38192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "0a23596a-a307-4244-84e2-66c125bed936", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abc811d0-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "f4f2cda0-b9a2-4c5d-85c4-2ba0380e1a29", "comment": "Malware payload (Mirai)", "value": "741cb90c0bf217e7b1c1090d5de6f1d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "1825b787-a485-4ea4-8cc6-8ed6f6591bdf", "comment": "Malware payload (Mirai)", "value": "025b1e0b3aa59cc650e8fe94fa83fce437234779aff0ce1e69f17b4a442eae34", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "4d06b452-0dd8-40cf-9b52-e54676fbb0ed", "value": "T15F03F11C034A7DB6CBE268B2E46006CF37335FBD922D281B358958ACE6E65420EFD5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "9550f24c-295f-4752-9ec9-4d2341309b21", "value": "768:qmBpd1EMjlcb03/69xKtGKK9ozhGSN0cbacboAv9q3UELA1:qopd1XBcoPcFf9mhG9eacboAeLE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805462, "uuid": "31ad6120-fa39-4d9d-8919-31d96aeb09c2", "value": 40500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "7d159016-2ee3-4c52-b08a-e4e66c48c2d2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abcdb16f-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "bf12cc34-a67d-47d4-9c41-7c0626edd893", "comment": "Malware payload (Mirai)", "value": "acad120b180c064fb022f3a8fbedeb6d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "ef695c23-d698-425a-8cde-130d376db617", "comment": "Malware payload (Mirai)", "value": "8d9b41cc92aac0fb1d3ff6bf1aa58b28d436e82aa9100e10f8c0d925d744841f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "98cd9bcf-01b0-4831-aa9b-11068a9b1c55", "value": "T18EF2F163F9B78222C307E87DECE590ED57FA9FBCB23E32A407104555169406B02FB5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "6b68c1f8-43de-4155-b52e-9756b6c3c4ca", "value": "768:XNNbLjA21zMaZdEsYHKizDKP7G4+FxZEzWWKBYess3Uoziw:dNf1zhus4dzmP7G4abEzWl+epziw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805462, "uuid": "ec6ea43e-c842-435b-81d1-16746266192f", "value": 36964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "a501b41b-72e2-474b-b8cc-e6e7aa75d4b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "abd67868-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805462, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "e76e8176-4f3a-4110-8ff6-b5a9eff00b09", "comment": "Malware payload (Mirai)", "value": "cedcb6140fc7ed39d01717e0c5f25158", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "ce06055a-8dd1-46e5-9d39-c9b99373fc16", "comment": "Malware payload (Mirai)", "value": "1d54d370e145facc9ae7b457909cce7c9cf558e56083c19aa7294d72a9ac311b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "08562ee1-4140-4b93-a8f6-1c08e094e437", "value": "T142639E56CC250919C28A45B470EC8E3B1F23A5C063877DF716AAC3B9A467E9DF406F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "853072ba-f846-4fde-b877-5d13ec9a168f", "value": "1536:m/ELeLiNaAQAgp4KbCV+7BuIzzCwZKEieMe:mIe2NDlgp/b9IIzzJhdMe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805462, "uuid": "54c004ea-afc9-494b-b30f-7845d35fb68a", "value": 67372, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805462, "uuid": "08d0fb83-aa17-4e29-9300-57e371b26c5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cd6d3062-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805518, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805518, "uuid": "b0f01a4f-9d50-4808-a8cf-4bf5e65b3ef9", "comment": "Malware payload (Mirai)", "value": "70010d770691de296ec4e7e106a7ecc6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805518, "uuid": "0df78398-74f2-4284-84b2-6d178c891210", "comment": "Malware payload (Mirai)", "value": "9a1241a79e889b38b7a00c89e3e23894a07dbe6c1a5d3bb85109025207f279b2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805518, "uuid": "68baa2b9-d069-4f12-81ba-c39e5adf5128", "value": "T19A03F14EF2A4E95BC3FE5C3CC24E02896E4631C03326EB581B041E6DAA26957F48E1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805518, "uuid": "4f694595-2885-4b60-a476-8528b7a28b9c", "value": "768:72MoE/SqQA5UtdcptahIVgXaNp/T8V3eoTaFkUvWm:WE/S9AetCyYgqNp4leRT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805518, "uuid": "8cee9f89-7da5-45b2-a47e-6c2e96f8f9e7", "value": 38776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805518, "uuid": "2436f990-1b61-4cd0-8e59-275b835fa1a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0102457-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805577, "uuid": "6eb9b0e8-e667-4f0d-92cb-ff1c399ccf80", "comment": "Malware payload (Mirai)", "value": "863842764f797a68b70efbc7e7b078a3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805577, "uuid": "534df30c-f195-4634-8535-1dd0ba07c1da", "comment": "Malware payload (Mirai)", "value": "0b9b6144e9a92924ca083af3f23dd41077f160c5b32f7a27952b3d9cdb744a6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805577, "uuid": "11f88609-d0a5-4ac4-a00a-2d2f921e5ab6", "value": "T197F2E1ADD1492C87DB3DE9711443F7C823719E1BA3D5CDA1D261EF85008AC237DA9A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805577, "uuid": "c2c8644e-9fa0-4aca-b1e7-d0bdf81ffe6a", "value": "768:dPe5sqv+4bjW2zpBszQSX4c9W41uImZmMB+4uVcqgw09v:JH4bjW2qkIh5SXB+4u+qgw09v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805577, "uuid": "61b3f4d9-898a-4373-8abf-93b3be4ff9fd", "value": 35308, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805577, "uuid": "81eb0752-6337-4027-bcc1-8b61e36fff21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f013af50-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776805577, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805577, "uuid": "313e5fd0-540c-4c81-9737-99847cfd972e", "comment": "Malware payload (Mirai)", "value": "4312b5b863148d3cd58223c9a0a6bbb7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805577, "uuid": "6340e9ca-6a9c-472e-aea2-5fb821d31d25", "comment": "Malware payload (Mirai)", "value": "1d032ee58df836c1a769ec51c86a57904c1e68a86e7ee479c92c3826998353c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805577, "uuid": "8ffd2f57-4802-4098-bdba-a3b20189cff2", "value": "T1ADF2E16A21EEE57CC276E7BB025DAF1084983D079E03876F918831FE6DDB6387A185", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805577, "uuid": "9362a87b-d091-4288-8b52-fe0b867ad7f7", "value": "768:4VLqaBByUVHThFjAfYsgzNQ2K/YVx+L4qLTpfZtX5x0gn:24UPCfGzNACx+L4qvNpDn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776805577, "uuid": "9b80fb6d-7a8d-4828-9960-799ce43f3c3b", "value": 37044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805577, "uuid": "28566f7d-bf75-4101-999e-98e9362555a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05bfedff-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776806472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806472, "uuid": "97485596-a80e-46db-8fbf-10ce08f41ddb", "comment": "Malware payload", "value": "f5bd6072161a05f483fbbcd7b2ee1052", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806472, "uuid": "6e88a7c5-d580-472d-9d03-21399a22310c", "comment": "Malware payload", "value": "0a22b2662e6f8c5b3024ea5f64a789b66c711ba5d6debafa288177295d1510e7", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806472, "uuid": "9e530fed-c3dc-4709-b878-7d28caf7b577", "value": "T1E44104BAB4628E30336DC5BD75C9654CA7578AAF491A2E74F043743C27BC32470746", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806472, "uuid": "cec51ee7-d279-46e1-8dc2-1fc0306d3ffa", "value": "48:vkwvpihneZZn1oBydX8JtonmzEvJGU6ljiPq2MTCki:vkwYheZZK8s2mzIj6K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806472, "uuid": "56cfe991-40c8-41e9-aea5-5f5659bedd8d", "value": 2083, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806472, "uuid": "d06e5455-e421-40cc-b602-59e4df2ddf2c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1739fd1d-c217-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776806709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806709, "uuid": "f913a7d6-2e07-4a4b-b352-da97c8f035af", "comment": "Malware payload (CoinMiner)", "value": "a6cf2bb96f20979d0d35965551b13fde", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806709, "uuid": "4c40f380-da4c-480a-8484-6532baf245a5", "comment": "Malware payload (CoinMiner)", "value": "dbb7ebb960dc0d5a480f97ddde3a227a2d83fcaca7d37ae672e6a0a6785631e9", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806709, "uuid": "90b0b57f-58b9-43fa-a7a7-2cbf4a9b1a33", "value": "T1E4753308476458F0F7A4E5888BCDACAE631AC95255F70F4ED4329CF35EC875336A2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806709, "uuid": "c8b0133a-d48c-47a5-ad15-8aed60f97080", "value": "24576:hzfEtBkjj8t0D/p5fAZ6LNnw3sXQyXQ9enZM/CTC2c/w9pwTRfkxZwFfV3h:hzKB8j8y/fvNn005geS/AX99SVkbwR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806709, "uuid": "49f59502-4dc5-4f68-bfd5-83ae6ba6fb0d", "value": 1560860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806709, "uuid": "59b1db5d-5479-480c-b249-caea7c7f9995", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef1309ad-c1b8-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776806709, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806709, "uuid": "e62dfc52-e59b-459a-b79d-3a3ede3911df", "comment": "Malware payload (CoinMiner)", "value": "62802abcae18d915a106788308192def", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806709, "uuid": "4c5acccf-0e97-4c76-a1b9-101300a856cb", "comment": "Malware payload (CoinMiner)", "value": "3625d068896953595e75df328676a08bc071977ac1ff95d44b745bbcb7018c6f", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806709, "uuid": "987738b6-ff41-4cd6-be4d-a45c191ea140", "value": "T1E85533D67B8493DCC13CF099E908DC283CECA9248F776D04DE5148C63667BB58A58A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806709, "uuid": "4f8a4e0f-8a17-446e-a054-dc2bae808560", "value": "24576:yaOwVvvYm3CwpbTqfb2tEZYclsK21F9vJLESiWiV5:y3wDTqfespsBfxJM/z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806709, "uuid": "19fb161c-1cf2-476f-8969-dfa004723fb9", "value": 1299516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806709, "uuid": "d5780474-bc36-4390-b807-951c821b05cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c7fb763-c1b1-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776806719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806719, "uuid": "51ebee9e-fb28-453e-927b-427d7eebf8a4", "comment": "Malware payload (CoinMiner)", "value": "ebbf199c7813577f72daa241d9fb3398", "object_relation": "md5", "Tag": [ { "name": "46-151-182-82", "colour": "#bf0f8a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806719, "uuid": "f9e07e00-25fa-43f7-9b8b-598024ebad44", "comment": "Malware payload (CoinMiner)", "value": "048e374baac36d8cf68dd32e48313ef8eb517d647548b1bf5f26d2d0e2e3cdc7", "object_relation": "sha256", "Tag": [ { "name": "46-151-182-82", "colour": "#bf0f8a", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806719, "uuid": "6eafa520-f4e2-40ca-aa65-4a18f6cc4294", "value": "T1378533346A465C25267B0FF4809531371CEB3AF7210AE5864E8E7CDD821561A92BFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806719, "uuid": "cfd3c202-ad4f-4da2-bb60-8edf972ac88a", "value": "49152:1LtoMxTuZCBqOoEVx8y9y3p3EesY603jBY:foMxTSIqOXVxfqp3Erj0zm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806719, "uuid": "5d72a061-bfd1-4c3b-8624-a6ff6d611731", "value": 1748196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806719, "uuid": "d5ec35b4-3bc6-4b9c-933a-8b22a97c6873", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff0364fd-c193-11f0-85ba-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776806719, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806719, "uuid": "87870d7d-6e97-4f38-b09f-38dd0a4ef1f4", "comment": "Malware payload (CoinMiner)", "value": "aaa5098c9caafccf15362b017825c64b", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806719, "uuid": "e2e76c26-9050-4348-94ce-5780a497ad4f", "comment": "Malware payload (CoinMiner)", "value": "59c29436755b0778e968d49feeae20ed65f5fa5e35f9f7965b8ed93420db91e5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806719, "uuid": "802aa4d9-7287-428f-8b8e-f49b7eadcbec", "value": "T18B9533D309864BF0BFA2EF3451585D86EA60EE744B7CB2B8F3B0A27436436E5E1604", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806719, "uuid": "76f77668-720a-417f-b94a-0f107d34715b", "value": "49152:EpCKabVQ+9qlNlpjN8H8JZGtucdfFY91ujYIQ+:fBqnN8H8HIazujYIQ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806719, "uuid": "f7e5a568-48ad-444d-93a5-fad65782651c", "value": 1880264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806719, "uuid": "b098d0da-e37b-473e-ac82-b29ef540b93a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7530a8fd-4dd7-11ef-ac1d-82aee05be84a", "comment": "Malware payload", "timestamp": 1776806779, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806779, "uuid": "933787bb-fca8-440e-81b5-0ff861ec6af6", "comment": "Malware payload", "value": "397ff5e54194072e6d8a44a0d8cc1b27", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806779, "uuid": "c8c521b5-4b96-4ce8-beb1-230230104482", "comment": "Malware payload", "value": "d46555af1173d22f07c37ef9c1e0e74fd68db022f2b6fb3ab5388d2c5bc6a98e", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "redtail", "colour": "#5b0cf5", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806779, "uuid": "ae300e52-9f25-4ce2-93d6-98c2a2756be0", "value": "T1DD01288E6722D51420DDD524FAF14F7DAE31F2856D226816248B31FCE5ECA9433E8C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806779, "uuid": "e6ed9817-58d2-4fd3-b987-04e5d6078f4c", "value": "24:4ud1jvF3dudpRduJinDSx1wyx1+u5C2uK6QuTzaH+2TQuTzuC7v:4uddudpRduJiny1wO1+uA2uK6QuTu+29", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806779, "uuid": "896d8268-d5a3-47c4-b1bd-ed4bf6386278", "value": 795, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806779, "uuid": "d7d1e20a-d666-45a6-85ff-00d7bc5f7107", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "027e3397-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776806896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806896, "uuid": "296dd55b-74aa-4813-90b2-e2d3a240ec2b", "comment": "Malware payload", "value": "4a4161ca3ff6275e8cdc3e44debb0f58", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806896, "uuid": "420de647-cd3b-49d9-b6d5-090111adf930", "comment": "Malware payload", "value": "96ee41b2d81c7c279b3f0bf78279bdc81569c8d50f10e3a4cbd1a6e41b7c533a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806896, "uuid": "2e7a0208-02d8-4e16-8146-0244bb8ffcc6", "value": "T1293163C660D158757EF5F52732A8850178C5A1C792CFBF49AEEC38D485CDD08B415B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806896, "uuid": "575cacf6-d1f8-4944-93c3-107cf0c0eee4", "value": "48:1p9pGKp9pBrpb5pM6pG/spZp1p5pS+rpQMpU:1LsKjj95j0UnjnjuMW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806896, "uuid": "06cc21e2-287d-4821-8e2e-dd9a878a4572", "value": 1713, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806896, "uuid": "396b043f-f9b7-4464-9414-cdfc225dd5d6", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02833db8-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776806896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806896, "uuid": "dfb44700-35a9-4c6b-82cc-01a6a4667126", "comment": "Malware payload (Mirai)", "value": "acfb0d85941b72fdb977cbbcfcc13c78", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806896, "uuid": "4f3bccc7-f5e0-4a16-86d1-5cb1d5957907", "comment": "Malware payload (Mirai)", "value": "7f61c5fd2e9e4388d2e80ab9acd3495bb9f19c0bcd5be2581b65ff86132e8eee", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806896, "uuid": "439cff89-8693-4f29-a88a-4689e38a1a6d", "value": "T1A023F116D484A077ACB87C2FE814C13AB25F2FB880D53412157083B96AFA54A7FFD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806896, "uuid": "464dd26e-f1e7-43b8-b970-f5acd52fc00b", "value": "768:UtDE5rxQJN5g8iOc7HD+bOuX3QM+mGM6f8x4RRabnpnMsAPv5E1iOVBAVb9oq3U+:gKOJYl57j+bDXA46ZRRQpnbqE1iOgp2S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806896, "uuid": "4d2745f8-b705-4d11-b68d-58bc20a247ed", "value": 47272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806896, "uuid": "553cd68b-fae0-4e72-8e5b-0beee2b1f415", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23197a0f-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776806951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "114861e6-ce2b-4d32-acaa-2169c3849cd6", "comment": "Malware payload", "value": "9dfa61734c957816b69d055e1786280b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "f1722ee6-e80a-4b54-a0ba-445fd9242345", "comment": "Malware payload", "value": "3fd8b9308a02a57667ccd70556803a3d0c983f868ed83f1503c275293e721ac9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "04859ce1-efa3-4e1c-a1bc-4fb625c9a268", "value": "T10003E17D0ADA1EF0D967CDB5E304EBB218318F6F2919994F00A4D5F38D4207AA8CAB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "ea2389c1-c20c-448f-ac62-280a50df24bc", "value": "768:cftx1jZUj9mKZciJja3CvXtisn4DmPtKrmlbjZRfSMCyJgGlzDpxYsEI:clXCfZZ8SvX4s4DKzE2VrYu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806951, "uuid": "8118e5e9-6e8e-424d-8834-172d8ea92dcb", "value": 41000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "0630133e-d0e3-472a-a64b-5c656842cb5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23199735-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776806951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "1bae0d55-579f-4434-9a81-eba48136af2f", "comment": "Malware payload (Gafgyt)", "value": "a3641fe38ab804b68394cce42bfef7b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "6723b0c3-7a89-4b73-85e8-38221c0a2dc9", "comment": "Malware payload (Gafgyt)", "value": "e9196b1a7313c41b2acd6eb03f7424aada3d6229c5cb91c0b9856fee0cf24c1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "45230851-fbd1-4e60-a491-9e9a0222254a", "value": "T176F2F230F3EFCBD1D9DB5CB02990BAD219FA58DDB341AD8C2DB52102251C7A69562F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "fdbc2ba0-e254-4799-be5f-a34a01a7e8a7", "value": "768:alOEohRt8Wea8RYzT3PEBWWkgbNsLOdTD7veV1t4uVcqgw02NWXPt:allohRww/6kgbqLaTGVD4u+qgw06WX1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806951, "uuid": "27d63cbe-f4a0-4b40-bcb4-cbd3c84223e1", "value": 36708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "1f5db58d-cec2-43c7-85f2-b0e5991bcf4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "231f213b-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776806951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "eef1c653-0a99-4069-afcb-a651c399b8a2", "comment": "Malware payload (Gafgyt)", "value": "6eb21537df909eb6c081a54e650480c4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "80328af2-515c-44c5-a799-458f61415446", "comment": "Malware payload (Gafgyt)", "value": "d4dc96500a5f30db330e643488bb3d852a7b58425f67c2301c08a9b4e481a62e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "ed8e3037-42bc-49e5-9c68-335db9906396", "value": "T118F2F126E82D964EC1AA00711AEFF56E0434330ED25D09FAFE7915D94697F723934B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "5ad61885-15a6-4d77-a4a2-d201d76a97d2", "value": "768:bxtvZ6vpuEgK6N0co/UfSagXVwmLAXEkGZQnbcuyD7UryqQ4:H8263tFwskGQnouy8mqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806951, "uuid": "55ca8b48-97b2-4e35-b6df-e54507fe43a6", "value": 36480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "f0870ad9-99a8-4d33-b256-1cbb81cdac4a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "232a145c-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776806951, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "cc966d85-3b5f-423f-9870-61c3e091a34e", "comment": "Malware payload (Mirai)", "value": "e5da49a52ac725353591601ea6c0249f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "adaa9ee5-da91-4417-bcd7-da5df2136c93", "comment": "Malware payload (Mirai)", "value": "bb91e0710543b0de44efde7eeaca0584bd1476eddaf93833610b3375d149be6c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "84d79750-b681-4a62-8223-49c567b1e87f", "value": "T1D193E687FD01EFB7F40AA77A449348157230FFA60E921A72B21738ABDD361D41426F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "91f2a2e9-817f-4597-a4d2-3c85c746dafa", "value": "1536:QX0XSn0yTJ8w4vHPtIzy6tsU8CFigjzBAkDjDRknyuFPxgS:QX/n0yTaHWzy6tsUmgfBB07FPeS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806951, "uuid": "8ce94da2-cdc5-4cec-8e22-ac5158fce75a", "value": 95816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806951, "uuid": "c22ff5bf-be72-406d-8a08-9b1c48ea6090", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "240b3487-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776806952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806952, "uuid": "d5debc02-a941-4616-bdbb-c769f805be39", "comment": "Malware payload (Mirai)", "value": "ed922ae49e6e1a519a2c2d5681b5e343", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806952, "uuid": "b07076a0-4bb5-408e-9778-bdef12804947", "comment": "Malware payload (Mirai)", "value": "89a0bf47fd151b84836447d0606e627d2d73dda96ff9bc7852dec39536b78d1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806952, "uuid": "e654163b-1d51-46d5-805d-d7eab56f189a", "value": "T18CA3C62B7B130E23C0C610B552E30632F9BADF5938BC4697B8A07D9D6F3998431567", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806952, "uuid": "3a180178-cd2a-4d74-94e4-81e84a1762a2", "value": "768:WFyTpEsIle7C8CoDAC4W1Yw/FuOMbzvzyGPVh92lnIUGt0sTYO+Nfb5Vt/iBOHld:mF8BDeYOo1IUGtDmND5phtTigvsvS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806952, "uuid": "7447c2ae-97fb-4591-93b8-5e21c2332896", "value": 103272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806952, "uuid": "fac89389-c39a-42b3-b5fa-fcc7f9bad1d3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "240b762f-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776806952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806952, "uuid": "ab99ba0d-0137-4248-971b-a0dbb2788e54", "comment": "Malware payload (Gafgyt)", "value": "1afb8ed24fbc2d494e8d70bfaf5aa3ad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806952, "uuid": "58e01a2b-cc0e-4c3d-a2af-053f4f8740d1", "comment": "Malware payload (Gafgyt)", "value": "83389c8dbaab6ff268d13282cb19e7b28788f9d1c15226f915c1341e05b66552", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806952, "uuid": "a6bcaae7-b015-4a3b-97e7-0c811f1dbcb1", "value": "T17973298799229FBBC017B4F164F55E740B56BD620E1B0AD97075FAE0427B8CEB00AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806952, "uuid": "031e2c75-16b1-4bd9-b639-9140d005a84a", "value": "1536:lIL/JqCGZlb3w+XhKRkH77GMbYcdCPOV9qXkthop:lIL/EVxXoRAnbTd1vsGO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806952, "uuid": "b7e6d766-1788-4a9d-bf58-89798b4f1742", "value": 80260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806952, "uuid": "cadb5859-535d-48da-a07b-3743035368aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2411c25b-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776806952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806952, "uuid": "220cac39-405d-44de-aae8-ef0b8370c7ab", "comment": "Malware payload", "value": "3c71b3c21fa904ee1a47ed364eb19670", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806952, "uuid": "45a044a4-f8cb-44ac-98d0-58fb4a19a8ec", "comment": "Malware payload", "value": "dd3298f0c1c727b71cd49cf2e2757dc88c9dae4b8a5dd3727c69ed61f72ed6bb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806952, "uuid": "e406cb37-b3e8-4dcf-ac53-186ab9f883ce", "value": "T1AE13F20FC9286EDEDECC4D341AAE67259AC1F18DAC54DBC817866659DF1898373CE0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806952, "uuid": "4c30168d-3099-4395-bfc3-3011f26c8b79", "value": "768:4uZ1rKzM6uUDWrly8uqvX08ai2SorAWEfxaSCi21uZMHXsCqZA1WRq0eO:v1MM26ly8fvz725zEfxM1X3sCqK16", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776806952, "uuid": "fd2cda9d-fcda-4400-8877-b7f60a326119", "value": 41424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806952, "uuid": "8c61bf61-e52d-4abb-84da-f6ab47ebd227", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "491d13bc-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776807014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "60c006ad-b17b-49d5-b9d5-2630e0113ac8", "comment": "Malware payload (Gafgyt)", "value": "f7b8543decf9c5d045b663a079bf3131", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "899dfcc4-c2b6-4cb1-850c-8a02005a570a", "comment": "Malware payload (Gafgyt)", "value": "6a05a588fdd3306c512a19b62808205a32f018d894fdc1b826816b0c54f6fd30", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "69f9632e-b28a-45ff-95e9-112f60419f8c", "value": "T158F2F15057C4A9A6EFF02E379DF4C987021906B4AB5A78D29F684038ECCB80D577A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "41dca0f1-4679-4680-ace6-1131054c615a", "value": "768:wwp8cQFWVwcL/OL3pt7fuIOOzH3F6dPlkYF96C8eN0rFSwGMe/3Uj:RmcqyPwp9fuIOOzX+dkYH67eNUlem", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807014, "uuid": "0deb5183-d666-4abb-8bf7-3bc1270e6280", "value": 35908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "dad06393-7065-4bd2-8783-9fc8ff4fd3d1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "491dfa2f-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776807014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "462e7228-b63f-465f-8d61-d5430bf79754", "comment": "Malware payload (Mirai)", "value": "df339a5f01f364057da7185712eea881", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "05e7c93c-f691-43d3-bceb-65a7eb2a0f21", "comment": "Malware payload (Mirai)", "value": "88a6ccb524afdfc7f8f615e8b90edfc2820fccb129ab5172930880c21aa4259e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "2518deb1-918f-44e6-ad3e-3bf49245d261", "value": "T1BB03F233A221B952CA440875C1DFD65F67056FB4E9E7EEAC72038F9A2D412C17EDC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "39bed385-5bff-4900-b304-459b585f17d8", "value": "768:lOgBaHN1tl9TR/nBGbb2TnS9GMz/aqGdJVInfXg2Hs3q3U7UA:lOgBafL/nQ9lzpGjYv+rH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807014, "uuid": "1da4d0ba-8e68-4fbb-b2cb-6b13351e7677", "value": 41416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "c76c85c8-5985-44a7-96bb-de39bc584c41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49211d95-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776807014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "f5fa2e62-ec22-4afb-af3e-25c6600adf3c", "comment": "Malware payload (Gafgyt)", "value": "0f5fb4dfc24e4e49d3b509a793fd78cf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "1c75c336-d079-4f67-b257-7025c6783edd", "comment": "Malware payload (Gafgyt)", "value": "b26e38152913fe46ced5daf1f14825a9464915c0fbf1a4f91ae8964078abad85", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "6a9b34e1-13e6-4d40-8f1c-afbca284e1c7", "value": "T116F2F153D755C7484215E87C2EF7B88EC810E709F309E2A24F906DB99B93FAC19192", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "a7cb1504-f453-43fe-b004-53ea7779d78d", "value": "768:WdkeU5QnPpRWmc1JEUKJY32cD5ekqa+SsqnbcuyD7UryqH+:cRVpR2UJ6DAba+Dqnouy8mqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807014, "uuid": "b39e6d73-aa08-4821-b77a-22673f45de0f", "value": 36772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "58631a25-24b9-42a8-93a1-5a4ff204408c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49219c88-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776807014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "a71744a7-50f6-45df-8f5b-ce0f843e4fea", "comment": "Malware payload (Gafgyt)", "value": "81c671d658bdeb96b4f8864f318bae7e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "679c0940-f4db-4c14-9ce7-465631334d5f", "comment": "Malware payload (Gafgyt)", "value": "c81ef4d33c833956048aa2eaa74dd4c32e6ed729914b83480d43b8e11942e776", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "5bbe7243-4bb6-403d-8bac-629ae28dcc67", "value": "T10303E0438BE6F8BCC535FA7D711F9AC0FBA09D2ED6410D3B04DB12B648A26A457342", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "86eb1754-31ed-4e9c-96ef-53265afa93ed", "value": "768:l/y93ruaPqh9bH/DGo28hky98TG80AKZtZNyatPvHSk2PM0vKJRasv9sPD:lm3z8bH/N28C90HMGkK3FuD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807014, "uuid": "ee61fc5a-4cf3-4e0a-ae0a-7d7452d62b42", "value": 39748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "395b7616-d3f7-4632-b3cc-17045a04ccbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49230266-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776807014, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "af24c346-6f83-4695-acc7-1add2cbea575", "comment": "Malware payload (Gafgyt)", "value": "c131af6741d3553a5d1dd3742e806b7c", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807014, "uuid": "8014e76e-0b50-4cdf-b777-03ab6ce1c869", "comment": "Malware payload (Gafgyt)", "value": "30adc0c04f1ae53154acad8f09cb4182e55aed1539e9f08ee875122bb96eb503", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "23c64a12-7177-418d-b75e-f1f61f34c0d3", "value": "T161F2E201674970178BA22DB6D96C8B525669076CF287B150CF6C0339BBC9CF373AAA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "67a49f6c-9347-411a-99c3-f413a8599f82", "value": "768:D/ZGdlMRnOqJvuVMinFMJ+HfLrDkLuSKwwe0Zbrsb3UaF:D/8dlnydK1HfLrDkLuUwFZI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807014, "uuid": "bf21ebf6-4659-44c1-ae21-0f288735ab17", "value": 37440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807014, "uuid": "b3ecac43-a9e1-4f0b-9547-00a5bb1767a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18238e99-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776807791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807791, "uuid": "acd05e95-d76f-463c-aaca-bc16ebf5c8ea", "comment": "Malware payload (Mirai)", "value": "13ae0c2999e127fe768daf229719525d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807791, "uuid": "c08273ef-655b-4cad-9973-34a235889b34", "comment": "Malware payload (Mirai)", "value": "2b526373f453242404ac5781e69784292b5d37ee5f136d5ab740224fc8567910", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "0b326dd2-c751-43b5-a075-780d94497e84", "value": "T1E7018CCD54E9A502C0B9DAC23B658A10D208DFC265ED7F3AECD42972C5EC924B425F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "346f7d82-ac11-4155-a963-8c61e8cc609e", "value": "12:+fFSviLfFSDa9BgfFeyPufFeDSZZfFeFe59XeoFmfFeFUyX09FRZfF/2fFUx7QfP:qFHLFkwkFerFeupFeFerecSFeFj03Rp+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807791, "uuid": "cf95c54b-269a-49af-88ba-047d54fac0dc", "value": 765, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "b3fb0ea4-fdf6-4106-aa6d-cafd43019e5d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18325fa1-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807791, "uuid": "7bbde119-4ea6-4d49-bd12-80b70b52ed83", "comment": "Malware payload", "value": "ce42faf50fed43e62d29d552e2b271c2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807791, "uuid": "2a24c939-6c59-441d-b1d9-4deffb5dd3d6", "comment": "Malware payload", "value": "86f665592a65e3efa9eec80de03da12a9cebda9f6a049d3615c8b937ba5028b3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "452f33c9-662e-4c24-a3d8-dd5ac481d588", "value": "T11B65E0677711DFA5D314C63005B3C7555AF525A20BE2508AB278C32C7A22A2DAD2FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "7a9ec458-5b35-44d5-a234-100cbdb48f42", "value": "24576:t4CTgOHoJHSTQFzx+J8nVZkpDZmFhJeyxuL7k2Ke5ihTq5Um8skdINYN/OfLihQN:t4CqoQFzxLVZknkzAXxU+MMNYpXh236w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807791, "uuid": "5292fd74-37be-4f8b-a784-54721b0696a8", "value": 1519560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "f556432c-f3d5-410b-962b-811f391ece82", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18386145-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807791, "uuid": "84ddfc1f-8c23-4227-a400-61c66eb647cf", "comment": "Malware payload", "value": "6eb2a942e5e4ce3f19de8248aab3a25c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807791, "uuid": "471a7f46-4142-488a-bdfd-2a9aea282a46", "comment": "Malware payload", "value": "1651711a0d430b7089a5281314ffb35877c6e593c53e9cb8ce1bef2091486a1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "510dec05-dbfc-4099-a196-3ee0fb048ef3", "value": "T12665D002FF816FEBC06FCD30892EC31711E9D98656D1622A71FC4B9CBA5D25A0BD75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "d9aeb69e-6ddf-4c83-af74-af082baba8fd", "value": "24576:ZYnr5PrLsOf860KhwVfLeyxtD4fXNOUGC9DOWQyRe8OuZANRDUFtVXsAWku/bXZY:ZIrLyrVTT0f8UBJQxf2tGFH/rK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807791, "uuid": "e14f1ca7-8f98-40c5-b91e-aa1baac2cf9e", "value": 1527747, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "f853ee98-8e74-487c-9b02-f61dd7ba6a1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18408174-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807791, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807791, "uuid": "0b1c069a-64ad-4f07-ac5a-eaed68cdb066", "comment": "Malware payload", "value": "1e0625800aca399918a891a34003198b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807791, "uuid": "f01dbf78-ffa5-4ac1-a762-69d66d54a15d", "comment": "Malware payload", "value": "6ac76621c3892075111f6ddec7e7b4ff1085495db4ce51e6fdfda8c1b42f7e1e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "3728fa0a-0c6a-4536-bab8-9914da8990ca", "value": "T1B285E082FF184523C9571EF0197F43D5F7617A4341F5A22A270E67672222E3ADAC73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "9dad59c1-1ce8-4445-9485-cc5c5485069e", "value": "49152:xHUcf3MuHMwpsdZXpn3Yl4hEf1ctHr6+9Vb:xHUcf3Muswpsq8vX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807791, "uuid": "0e02e7a6-a28c-4335-a1ad-dbb3b8116c52", "value": 1718222, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807791, "uuid": "41794f79-7c00-4d0c-9c7b-f7f34c894fa1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1855e7b2-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "21c513b2-a7aa-4e56-9ec2-62200ed32d43", "comment": "Malware payload", "value": "237c174e12fed568c57f3891de583543", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "3ced2df1-85cd-427c-9885-b8867a552118", "comment": "Malware payload", "value": "b89ca0930239e891f340dd65107c744bf2d322c9fc98c3a08cd126d680599cc6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807792, "uuid": "8ca6eb5f-19b1-4e11-85aa-5fe8b428b482", "value": "T10475D197FB0A0F97C0EE8B34841A829A03685D935952C76DB69C3F9D6F3E3994FC14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807792, "uuid": "57b96a01-a0e9-4981-9570-e83da6c36f4d", "value": "49152:SPS3333333333333ZI3a33333zUjvWhJZ8OUI2Atkw5:S63333333333333ZI3a33333WvWhJZ8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807792, "uuid": "bca3abaf-6d25-4c56-8cc5-0afe24bdf25a", "value": 1666352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807792, "uuid": "39229480-c4c3-486d-88c6-86e5195eea0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1860d76b-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "2f4cacd3-9972-41ed-b84a-32482bf4c742", "comment": "Malware payload", "value": "db7b24262ac5d54abbf9115b190b3a5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "bc43d22c-83d1-4644-bbe3-261bde653d2b", "comment": "Malware payload", "value": "778ca9816558ae85045ad676fd016bb7e0d586ff4b05a80472006c81180b0d4d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807792, "uuid": "2f4ea8c4-e8e6-413c-bc5e-d1acf7ec12fc", "value": "T1C975E189F783D8E2F65341F5024FC7E20574A126A057FAF2EB449A7678367922F163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807792, "uuid": "62fbc5a3-76cc-4bbb-a437-83fd52965091", "value": "24576:UaZSKQphYuhMEZ10ObJPFEnPV/wyQBWPBnMwG8k4pPHXm+3IgYAaqDPUXyM0yoyR:FZSKQphYuhMEC9m05+isgYoDUCMdYm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807792, "uuid": "0d86f826-937c-43bc-9e5a-3865b49e34fa", "value": 1690286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807792, "uuid": "9d5e418a-a4a3-483a-85b2-d362dac5cdd2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1861c2ea-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807792, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "ba0ebb32-bb50-424c-b819-1d860967b7bc", "comment": "Malware payload", "value": "201a4aa29a15bb63428370828b874b44", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "d0143902-0c4c-443e-ba14-a9d1e41d3841", "comment": "Malware payload", "value": "a28d0ec3138f9514000e64263db3a460ef5b3580256522d66d44544f50c59415", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807792, "uuid": "e65ae31e-af45-4483-a6f0-aeae64abb66e", "value": "T16995E15AB2F374FDC067C030835BDB626936F47545222D7B21C4DA342E96EB01B2AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807792, "uuid": "f1a77efc-1bb4-4bb8-9ff4-de1b6bf713a3", "value": "49152:A19DV6Ab6AGRE+gTr88IXI6F2irjgyW10d+2ua:K9DV+RU8l1frjgJC1ua", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807792, "uuid": "45b25957-d2a9-433c-8771-1410c6ec77c3", "value": 2010493, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807792, "uuid": "2ac40369-7022-428e-b11a-63635953fade", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d320f80-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807800, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807800, "uuid": "db4cb92e-4935-4a39-a801-c49c1c51fad8", "comment": "Malware payload", "value": "760c70ccb4880833b7e42fb863a84780", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807800, "uuid": "2690c19d-5015-42a7-b167-82624f2e7361", "comment": "Malware payload", "value": "6e8f32e4975389dfbb3bd3d4a17ca1a42c7a2f6d25da74051da2f5839fed392f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807800, "uuid": "814745d6-f815-42ee-a456-2d1e44b26ccc", "value": "T16175E0A273458563CEA44B7106D38370A7F9392252F3825EE31527381F725AE6D2ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807800, "uuid": "31e89d10-0328-41ee-8ff4-56525c454379", "value": "24576:TD1HGqhZd4FILjPYubEn206uIOoBqrzRWFXmjHkqBLsn7l803H1eumao1yPsl/:PZYILjP/Eh65qrgFGHkoLsn7FcwIr/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807800, "uuid": "eb62744c-e76e-4fbc-8eae-dd86a677ed91", "value": 1666309, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807800, "uuid": "fbdc2ee6-9cd1-42f7-80ab-110cf7696660", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42f2b20c-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807863, "uuid": "7fb42781-a478-42fd-9662-26762de0a5de", "comment": "Malware payload", "value": "c3a270c2a1cf7381e23e817995e166b8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807863, "uuid": "4c1a782e-1cfb-4b92-adc6-114405896cc1", "comment": "Malware payload", "value": "8b9268990208322b43d9920662ea93bcfa713adbb30ca6439ae04fd784e1c6ab", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807863, "uuid": "b7ec4fb0-139d-450e-b4e1-6c0a005b75a8", "value": "T122350156FA252F2BC8564675C59BC2382377F1814B82B303B148E67A7C4336D8F1EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807863, "uuid": "0eebabc0-c26c-4c51-a8a6-8e0ff4693f66", "value": "24576:l0tqcI4qN/1sfElJokJ56nrGn+lANIliGZQTj1JdlfR55SimdVKxv:aiN9kiUyn+VlTZM1JnfR55/mdIxv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807863, "uuid": "e82e447d-a290-437d-9cc8-4eaa11e26a8d", "value": 1136784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807863, "uuid": "7acbd07f-6b00-4cb7-b5d7-f0afa7671c67", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4401a54a-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807865, "uuid": "14d7c93e-11e8-44fe-9c92-15c4206161d2", "comment": "Malware payload", "value": "58a416e782e2811b1e2beb24b9d20815", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807865, "uuid": "cf034e59-bfc6-4a86-9a24-8b31d483e1d4", "comment": "Malware payload", "value": "f33366f06a72af880465a721ebe26b4e0c6dd8f61889dae61117c893418646b1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "0e722b57-3c63-470f-8f87-9792af84ffd2", "value": "T16165D097B7248995C0706A3BE1A7EFB183677E3119D86A0F9D48F37648733088F15D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "50d595a5-c348-41a0-9716-c18580e83ac8", "value": "24576:fBAXobSBtriTNaVkd9vVOUfv6iUlXti4wA6gHMjUl9E2CcT7:KVVkd9EUk9iEfDEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807865, "uuid": "94bc2f1e-dfa6-42fe-8cd0-54a07d2c0a10", "value": 1493846, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "ba99662d-ad7c-4d3b-84a2-c27016ae7b54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4437494a-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807865, "uuid": "e02467f1-9d9c-4cd9-a278-e3a9262f5b35", "comment": "Malware payload", "value": "6412f8e72611177f4bf128dc97996525", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807865, "uuid": "55ebea63-eed8-40d2-b2d4-942ebe8a158e", "comment": "Malware payload", "value": "ffd8ceaae6bd9763accee58f339a8867fb5fdc889628189a67e34b89164d7c4e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "d49222db-8b17-4449-8ad4-41079e5d4198", "value": "T19265E197FE6E3C07C2D7E33E9B8AC3B1532BB191D35341527681432CD9CAAD88BA19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "01b2dc13-32c6-4273-8a39-9bb83f8c55eb", "value": "24576:dJ9uTMBCNwyCeThYVf+QcNSNE03Uoo3ldibsgHyfuDHd0lMV73CMPBN8b5BM7nG8:tr+of+gKcE3lMbsgVDHIi7CM5ibbM7nv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807865, "uuid": "9c62da8c-3a9f-489b-a544-5197a8170b02", "value": 1440827, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "9fac2722-d93b-47e7-ad55-65692becbbb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4437c157-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807865, "uuid": "a817ddfa-81d9-49ea-aae1-acfa1c998b68", "comment": "Malware payload", "value": "58f7dc74444ed94b5be777bcab22decf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807865, "uuid": "d30a4843-52bc-410a-bbe4-3833dc3ea5f0", "comment": "Malware payload", "value": "e423ec33d58e6fc9ea318223dced2046f687f7e8005deb43ceaaf5b330b36fd9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "3ccc5b2e-4e62-4539-bd25-6ef14ee9f34e", "value": "T1B7766C90F748A176DA4B0A3248630B70B3A16D42D2F48D2B4719F72F15F2AF7695FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "e43811de-582c-4bb3-98b2-a98c31c81b00", "value": "49152:ZPOdDvv2IpYuBO/E8coH7kpyAOj8sU3nolGvJ8nKssG8I0GIbCGbkoK5Hxvt5E+w:qHnnO/ErE7k0nU8VIb6oK5RvjEv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807865, "uuid": "2ece9c12-a60a-4606-80ad-88fe9b11ccce", "value": 7340216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "49e2fa38-5c7d-494f-916c-3287bf2d82fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4457e109-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807865, "uuid": "cdd5af44-d21e-464b-9636-bc85647b8e05", "comment": "Malware payload", "value": "29732be2ac7a7cfb627921b4cfbf277c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807865, "uuid": "c8643008-d227-49bb-97d1-c80acf3526a5", "comment": "Malware payload", "value": "53b231d04fb3c24d2c5e11e75079c452b6828edcee200d50fcb609c0d4dc723b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "0f1de488-9909-4dc9-b995-38d835bcbeca", "value": "T1B2564951FECB54F6EA030E3145ABA22F53315D048F25EBE7EA407F2AF9776A119321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "8b41a3fc-ce9e-4de1-9e50-c4f145db421e", "value": "49152:D179WD9y8cDBBH4Ymp7YQ8Y3Ie56uXT50YhkFqE3jRoB5Er:hJWoxH4Ye/j5ljY8Er", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807865, "uuid": "c6837e84-7963-4bed-a657-2e2710262480", "value": 5959864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807865, "uuid": "464677cb-05da-40c8-8106-79448e055982", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "446ae4cf-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807866, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807866, "uuid": "fa5e0615-c73a-4f9d-befb-a9ca7ded7ab8", "comment": "Malware payload", "value": "791f9f22ecfa3a9b8378a70506d34fcc", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807866, "uuid": "3f82c624-3106-43d7-b8e2-ad2547dc9e35", "comment": "Malware payload", "value": "995b11fcf3b13fdaf004c73dfc135207f75abbd5bd34258fd5aaf356be848077", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807866, "uuid": "e4c4381f-7a0d-467e-aa3e-8eabf2c6dd35", "value": "T13B55DE06F8809F62C5D12976F65F8268731747B9D3EB720699189B343BE786F0F3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807866, "uuid": "d0204fc8-4ca2-4991-95a2-f07cf1e4d929", "value": "24576:6z/qLvfxB+6qHxWiOeiJnaGYTAlt2TuY0HYF414/bj+eNsnnO30VGZW4jiV:6kfxB+bxWitGYlTz/F414/btYnTYQV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807866, "uuid": "425a52ad-c697-4a00-a4ad-a9672b3b0b12", "value": 1325139, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807866, "uuid": "9cfa88db-ed29-4ca7-9000-cbf3471e7bc2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46cb6f18-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807870, "uuid": "7a9f7c53-51df-4f92-abba-bbcd0a5f8a4d", "comment": "Malware payload", "value": "c4323a0d866e0382e1cd108f98ff9ade", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807870, "uuid": "ee831217-d20c-4b9f-89e7-bb59e9434920", "comment": "Malware payload", "value": "5579321dc5c6cd7c448dbdb5d863a503cbad8d5a92242d1d5b5c858ec6f8a9ac", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807870, "uuid": "fce84e04-7398-4f89-abf1-28c65be49d4a", "value": "T1B1465B96BC5DA462D6C976742F3612D43339BC448F82C3272A24B73DFAF63588F126", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807870, "uuid": "f00c1181-90f3-4d20-b5a3-c12cd57cdd73", "value": "49152:e00hbX0/kBX2kpOGtov71dhsbXKATuU1wqS+GW62V3dxW0CuDyx5ET:e0COWov71kbXKcuU1Y+GvnHET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807870, "uuid": "873951ac-d7e6-4ae6-81cb-9e85d14f23a6", "value": 5767352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807870, "uuid": "74e1d072-8e75-41f8-82c4-15c34238e36c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47162d15-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807870, "uuid": "c5b871ec-7990-4b58-ae1e-765450f532f3", "comment": "Malware payload", "value": "ddd4ae6bb3f79a74e50475ba33c10fe3", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807870, "uuid": "6d2db4e3-95c0-4659-af9d-b23f5fe22422", "comment": "Malware payload", "value": "7268d7c9e2493144420d4c45bd6b2f884b71f8deb934c99b120a4cdb41e43022", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807870, "uuid": "9790c965-58b6-4d97-a871-dcb103e4ba7b", "value": "T1D1465B46BC1D6462D6C976742F6612D4733ABC049F82C3272A24FB7DF9F23588F126", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807870, "uuid": "f3fd3fc2-bdfe-4118-b9f3-8a15e5480439", "value": "49152:J4ztGbX0/kBX2kDZfq0X5Wj4fyaDHsX85lJ+xhPI4kQGTKSW0CGD0RL+v5EJ:J4zqZfD5WEaaDHss1+xdChEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807870, "uuid": "4a082b93-afc1-4a6a-b937-c0ddb7cb3720", "value": 5767352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807870, "uuid": "ed8493bd-0995-4088-b726-382bfbfa6bef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47440d40-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807870, "uuid": "5b180e75-14ff-4133-a431-8b5006dc0c72", "comment": "Malware payload", "value": "62d9b1b28b77452ca9b9925106eea4b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807870, "uuid": "061efa4d-aee6-4a43-850e-b1ad103dd723", "comment": "Malware payload", "value": "663c88ca9c3d9779010c9fd7d6316b2692c1ec95e16b745ef39305713f4bd616", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807870, "uuid": "701650b8-cdb5-40c8-bae3-2280bf048400", "value": "T1F9565B43FCA455E9C1AAA13186629253BB717C486F3163D32FA0F3386F72BD06AB57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807870, "uuid": "0ab62d0c-7cfa-4765-be40-c0b5acede58b", "value": "49152:223K19EYQ/CoU02GmSOf6X832VsOwR4zJWXjISsIkZQ+9kMA/9xrraryOQ3bM8hp:2dqDF5mETz0ISs3QZ/9Rm/qTtkXE/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807870, "uuid": "fd23ec0c-6778-4b21-8ca4-6a4a6e9a219c", "value": 6172964, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807870, "uuid": "60463191-aeed-4108-beae-73ebc4fc02e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47644e12-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "f0ec600b-2e10-45ed-aedb-0d0e98b4ecb1", "comment": "Malware payload", "value": "9c0b5136c5fd2920549beec57f53bdb3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "8bd1d67a-f29b-4c2c-9b14-7d93f166b07a", "comment": "Malware payload", "value": "e366d7f3786ea7e32f9e0c72906df50838637a21a5fabe2a461e4594b90450ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "82ae88f1-0b17-4daf-9ad6-53125d43dc90", "value": "T165662862BF58DE5FD29632314AA6C23873D13D0081B021379756FB1D1EBE2A09D6BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "00bf2823-96a1-4a02-97db-80220f804b24", "value": "49152:mpn9Q1DptgYbVLg/x1Y4Z2CPofHxvt5E1:mUCjPWRvjE1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807871, "uuid": "d2c39b9b-7c81-4465-bed7-88f8feae54a0", "value": 6750392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "90c6d455-e782-44d5-8573-1aa71806d228", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "477f67ff-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "9b60dd59-5dd3-4579-b921-9e478a5c18d0", "comment": "Malware payload", "value": "05774c488124de95b86464df4c28cda3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "4a8f86ff-8a59-44da-aa47-e00913692505", "comment": "Malware payload", "value": "899d348cd9495d2f1fa745117185a7b46e931bc1520ed731a42731a1543bd3f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "64349242-3684-4d8a-bb86-b2ab1595f3fc", "value": "T17D567C81FB08A126D94A0E324CB30F74A3516D82C1E4C96F5709F76F55B1AF69A4FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "73843f1b-1aaf-4447-b813-a5fa4cad8515", "value": "98304:FHki5UPR9nNFYLwCsuqexilM8Pid6OxTNOKlnBPLAYHRvjET:hCowCI659lhzR4T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807871, "uuid": "df4318f1-58f3-4385-a265-fa369187713b", "value": 6029496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "d811bf8c-0baa-4203-81df-3ecc6950752a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4792b252-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "b6c7a011-b913-4bbd-930a-57502bbf597a", "comment": "Malware payload", "value": "bde13c59c0439e17936ffb83506fd6be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "3edac975-554f-49ff-a48b-29ed3212d452", "comment": "Malware payload", "value": "5ae7438169237848bf4d59fc3c34716f3986c7bff6962825803fe3322a30b07d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "d49149c5-e823-4e1b-922b-2aee1548ddb3", "value": "T1726628137A28EB0EC26821344CB1CA942B7A2C4942D79517B791F729F9F20AC5D6FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "0dc4513f-4206-474e-b55c-5816dcf012ea", "value": "49152:Z/RDTmU0X/62rwAyyTiW4tMcEtal/XHiaW5gQl0jbx2b8l+VPlWvQfNijHxvt5EN:y4K/gQl0/+8CTfNijRvjEN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807871, "uuid": "83a487f6-b902-4899-a25c-317893ae4811", "value": 6881495, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "29f9c632-595a-4f1d-b300-cefd23186779", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4798b64b-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "918b6ee1-e877-456c-9a40-5d25168b6daa", "comment": "Malware payload", "value": "d8b338fc4f1f03af36864efde2e0cbed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "20510325-84cf-4387-b049-91ce932afea9", "comment": "Malware payload", "value": "e38f99fcbd9a8062d1cf787b0f322cc436bcb44508a45f8599e9f0bcb9407ca0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "c915048a-ca92-41d5-827e-6b718e6388cb", "value": "T12D66E909ADC42BF6C06C5A7494EACA5522706D144EF14A3626A4FFEDFCB62347F478", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "1d49e38d-f259-4fe0-999d-abea60d25d4f", "value": "49152:AuzdeZGYDzXmaEWXB5/EOWb/+PEKpP973Ri4d5EO:AnXBpZPpdlzEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807871, "uuid": "4e11de40-d3b4-4abe-ae87-2218dab81fad", "value": 6881495, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "db4c3b54-e0e0-4b2e-aec3-4a000721a041", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "479cb669-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "5601e5e9-e51b-41ef-a0d3-f9b48267ee54", "comment": "Malware payload", "value": "fbf59f7fb846328c3756efab94671e11", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "e7e63f37-fba7-4a87-8227-c1c38f67cb93", "comment": "Malware payload", "value": "942a26f48c351cae40acd4507e156a99c7c8aa495520c838fd801582c4c6b611", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "6598f2c8-7adb-4724-88e4-9899d5681a02", "value": "T11066E919ACC42BF6C06C5A7454FACA5522706D144EF14A2A26A4FFEDFC762387F478", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "cf70becf-b63e-4483-a30f-6ccc966d9819", "value": "49152:DvFdgYUdkdrYQmvyACZdVB/ScmPJKpP973LdcMj5EWw:qLvyXVsP43yYE/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807871, "uuid": "6dfc7857-3914-416e-9849-36c986a4fb15", "value": 6881495, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "6fe87da1-fd0c-4fd4-8cd4-3efa8cd4eaab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47aee185-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "2f790566-fc8b-40e2-8288-94154c369253", "comment": "Malware payload", "value": "5101bb295942a5381bb5feaa07b70b4a", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "3a93daac-d4d9-4e81-8e3a-9061637028a6", "comment": "Malware payload", "value": "0dccce596271bce0c01b23ba4e1aadf14703578e50dec2e74e274dc1af928abb", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "d5111d7d-00ab-4f0e-8c17-11b77ce55c11", "value": "T184562887B8D24942C5E43637B9BE80C433635EBA9B8752566D05FE3C3ABE1D90E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "9d7a3663-ec77-4128-bccb-b11f3141f5d5", "value": "49152:2WykElbTtqR6ARLnLVSrG1ocbZGrDuDkNbOdC9S5Ez:2WyPTtY6WVArDzVOQ9oEz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807871, "uuid": "877a7650-aad9-4282-afbc-6cbf9656996f", "value": 6095032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "91adb8da-8867-4b5d-a055-d56c943ae37f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47b0866c-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "8d736916-ee2f-4d5f-a918-82813c4b6d58", "comment": "Malware payload", "value": "95d355c0ae3b971110fba9aa219ebe29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "ebefc19a-c1fa-4735-9bd8-781761b39b68", "comment": "Malware payload", "value": "ae3e28e300aaaddf982b86e54a92445fbe43468736c66dfc40afe4cdc5babaf6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "7a2adb15-9a8b-4d2b-b9d9-1ad62131187c", "value": "T111661862BF58DE5FD29632354AA6C23473D13D1081B020379716F71D2EBA3A09D6BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "4d3e411d-e5af-442f-8672-a88a40c26069", "value": "24576:yWdP5F/SKiMPyFujRxTUqMl6xRtT9JAzFYhmz3Nxo4OqOWfzo4l7YFZCzt2jgip6:1jtdUvOSFYhCs4Dzx1YFZ2C5lHxvt5E7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807871, "uuid": "293b495a-7ad8-4ae1-a6fc-04842545ec84", "value": 6750392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "c0b140d1-80fb-492d-8947-12bfc703f80a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47d9c0bc-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "cd63c504-e044-4ac4-a693-b99fca73d95f", "comment": "Malware payload", "value": "bcd5b04c157533719c2d632b491be1ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "c631f809-34ff-40cb-8ff0-e813de9bdc01", "comment": "Malware payload", "value": "7bdd81a5d7dbff7d4b6ace5aa4c7a182fece2eb27d5cc09bb918f5c5c80395f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "486853de-37ef-48cf-a94c-a98b44d13e73", "value": "T1B5860A51BE822FA7C5CC037445EE63A522903E454AA2472723B4FBE83E7773C9F569", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "911440eb-21b5-4002-9d4f-cb2524642084", "value": "49152:9yZSCH4AXN35Bz8eDyca6PssG8I0FJtYZxlBkHf6Xzq5Eq:9mSI4CN35BzNMD0Eq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807871, "uuid": "0f55b765-051b-43b9-8a9f-348762a2f40a", "value": 8257720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "7b7129ce-6162-4683-8889-779ab53b87cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47e05f7e-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "1ad2a7fc-ebb7-4a12-9d7c-7d036374be83", "comment": "Malware payload", "value": "9aa2e0c29a598a73989e38791cb5535c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "840cbe8e-00c5-45d7-bd35-0b6d8c237664", "comment": "Malware payload", "value": "37b8a46b96ad5a561548b96e123f3fcfb5f97cd4ccf2d66f0d7cda99c29b5a7b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "03e1e88a-5744-464e-8cfa-e8615e35aa84", "value": "T1DA86F905BCC92BF7C41C4A3444EEC99212B46D144AF1566A66A4FBA9FC77239BF07C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "d924655b-48e9-4b7c-82aa-a82205a3fe5e", "value": "49152:daBeW559Kx0fjxRoi6HDatgNqB8/OassG8I0FP5m8S+kHPbGDq5Ep:yA5HDyCPBwPb1Ep", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807871, "uuid": "d24d8732-37bb-43b0-8eba-082aa7c6f912", "value": 8323287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807871, "uuid": "7c5d4c77-6bda-416a-be46-a10a0a684e29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62aceac9-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807916, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807916, "uuid": "da547002-6e73-4856-9028-6e9a357f0768", "comment": "Malware payload", "value": "297e0fef966395441ad57a4d56d00b43", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807916, "uuid": "9f6c4c78-2afe-40c0-a234-13e7d38b5208", "comment": "Malware payload", "value": "19b80dade9c98594a3fad9a7dc3a5bcb074b66c5ec5e91fdf0d8e075ee3bc0ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807916, "uuid": "68a6e7a8-e83e-45dd-92e6-df4186765337", "value": "T166566C81F708A126D95A0E324CA30F74A3506D82C2E8CD7F5609F76F45B1AF66A4FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807916, "uuid": "3db1c40c-fa61-4c97-bbdd-373e1016b6ce", "value": "98304:OlEXA5vHkaeJ/Gdk3/DVGtRAyr9KwMsERjrABPBRvjEH:MedGobVVPjEhBR4H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807916, "uuid": "cf6c55b7-7b01-4ed0-858b-10baef32783d", "value": 6029496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807916, "uuid": "71aa75a1-84a5-409f-b543-868c8646cb59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6d783381-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807934, "uuid": "38e786a5-eed4-4687-8336-7cb6e6921f2d", "comment": "Malware payload", "value": "3cf6a3a30a8343f9aa08f5e37241d757", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807934, "uuid": "d4109288-76dc-45b9-926f-cf3eaed9d063", "comment": "Malware payload", "value": "578544a94acd0df2d6fd479536f4ca3ee0355c01cfae6402d5f8b841568367f1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807934, "uuid": "f0beb473-7a0c-4195-a535-0cb043a6558b", "value": "T1BC660955BDC32F66C19C137445EE625662603E454B92433327A8EBFC3A7773CAF4A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807934, "uuid": "9ac02315-a373-45dc-8995-b54c663cf3b1", "value": "24576:mmBNK5/eVD+fkW0X6MzuvGtlaEbOdWkQ/iDpX69d0rAwi3O5FfqOW7vgi/YkZrzD:M5sD2sKvGyE8696eYuvguYkZfuikP5En", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807934, "uuid": "4a193b8b-0d5d-47fc-9f8d-e32646ddad05", "value": 6750392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807934, "uuid": "4ebb46cf-c7bd-430a-99ed-f7215e21f355", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dc6de37-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807935, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807935, "uuid": "7003a22e-23a5-428b-8c0f-2d63d23de92b", "comment": "Malware payload", "value": "16ece25ef70a54927c33711e59c30545", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807935, "uuid": "422d7d8f-01cb-4669-a7f3-0ad8e58c4b81", "comment": "Malware payload", "value": "f5726161b1ec24638d84dcd0d0475fb9dfe05739bd55feef877da57c2ba3a200", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807935, "uuid": "1c687131-9c6c-424f-93eb-9fcda3f8c429", "value": "T1FD8617627F99EE1FC39431358EAAC23433D57D0081E020369762F71D2EBB2A59967D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807935, "uuid": "21385134-5702-46c9-b009-18e8992ff76f", "value": "49152:7519ETVzfY/vJ0pxsa6PssG8I0DQsYfxQ9eUXCPHxvt5EW:7aSxeYgPRvjEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807935, "uuid": "b277a4e8-01ae-4ac8-8664-1758e649cc78", "value": 8257720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807935, "uuid": "6895add5-90b5-4404-ad10-8491fa384d4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e70e97a-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807936, "uuid": "b24c2377-748c-48e4-b117-e94df4cfb9fe", "comment": "Malware payload", "value": "d7b254d8899d9d0d8827d0286cad691a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807936, "uuid": "753327a7-65ec-4eda-b78d-0cf3e89c5565", "comment": "Malware payload", "value": "b31d1537891823da6d38020fbcd95c2a6c4be79d1a4a1b3e2e397fabf53bf325", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807936, "uuid": "b4b1522c-50c0-41b0-9374-3d33235bc12b", "value": "T1F1567C09FD249F71C7A403B649B802981330AD02AFC75716A734F73CFDB66D8AE466", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807936, "uuid": "c3fa2ab7-8a55-4eda-86ee-d6f82d3162e3", "value": "49152:KjwUndJXtlunLkWRWXHKArUaA0idIf2dJuV0l9cfhEIiks5ED:C5nzXt6kWRWXHKADXhEhk+ED", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807936, "uuid": "91a1453d-0a24-43a2-b4d2-f82305ed0896", "value": 5898424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807936, "uuid": "ec9a0f22-3d21-4483-ba4d-a6c48fd13e5e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e736575-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807936, "uuid": "54a0ca9c-df61-4c71-a4a7-e3f879b5c9b8", "comment": "Malware payload", "value": "b111a7014b9f8f86b4d65dd9cbc3b32c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807936, "uuid": "3090a38d-7f67-436e-97af-c3ee2d1db17d", "comment": "Malware payload", "value": "aed049671c89881ab6c3a8b9312997685c2f4c5866b3b5e4bf5522fdd4d4a7a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807936, "uuid": "82044614-d3c1-469c-b787-2d3381dbfaac", "value": "T154563811FECB54F6EA031E3104ABA22F63315D054F24EBE7EA447F2AF9776A119321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807936, "uuid": "cc968a09-a7e9-4a1d-bac9-d0a744685506", "value": "49152:9mitu+YPUTHXFsyqtLEi0X5YauoTeanUy66gY4jEGjR/tF6z75En:cQuiTH1sciouCCanU+CXkEn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807936, "uuid": "a0638708-45e3-4ca1-88a2-5d7f01f35428", "value": 5959864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807936, "uuid": "e157a0d6-dd90-454d-ba36-d70eba52de44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e7e9329-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807936, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807936, "uuid": "a2d3e1c6-f713-4762-be15-7deb1c21a13a", "comment": "Malware payload", "value": "59d762bb15c2789c0953b014af9316c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807936, "uuid": "c1aebd86-5f41-42e1-a78b-f1a035cbcc88", "comment": "Malware payload", "value": "fb9bf5ad1ed10e7757446cc2149d08d1062072dc5bd94f6afcd0e2144448c3a7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807936, "uuid": "ac7ace1e-8cee-46e6-bf2f-bf6025b4fce5", "value": "T1AD6628137A28E70EC62821304DB2CA942B7A1C4942D79527B791F729F8F21AD4D6FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807936, "uuid": "02cc70b2-1dfc-4559-bca9-7dfd2c00bd62", "value": "49152:XQ6QXGa7nRV6yDw0Oiu8MxIYPeRBy77QpL6fHEZn82+VPlWvMYo5Hxvt5EN:YMw4fm8r1YYRvjEN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807936, "uuid": "ab2fb985-bdc8-4533-b04d-e0c47a27231a", "value": 6881495, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807936, "uuid": "19226698-2fc1-49c0-868a-b3e0294d52fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f266493-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "48c394c6-4c47-49de-b93a-f9e13b91a582", "comment": "Malware payload", "value": "d8e11b8b48e111f44767287a4badc7a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "06dba493-927f-4e53-8e26-717e2004b180", "comment": "Malware payload", "value": "35547c58761e8dde31f28728cae0893354e595a68910dd1372fefb36b474ac90", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807937, "uuid": "93676c51-6c42-411d-8558-99b4ce52c187", "value": "T1D0565B43FCA555E9C0EAA1308A629253BA717C495F3163D32FA0F3386F72BD06AB57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807937, "uuid": "c8a18afb-1a31-4a67-8c2d-b7ff31ae78b2", "value": "49152:JSCfQ74hVT4GcAU8Ake6EHfj72139Fok0wXdzDIGVX8D3oq2tMVGzbG6vM8R5OHz:JE8fFa656kvXdvHqoq0MWbRTOkvmCEJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807937, "uuid": "bd4e6a6e-1b1a-41d9-9c13-a888d9a0c998", "value": 6168868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807937, "uuid": "64ee0938-bb2f-4c42-a1c3-7e5ca5d7f40a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f2e8312-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "c9a6c72c-65d5-4abc-9900-33453e62b831", "comment": "Malware payload", "value": "45f23641fcb8ca66e3dada22c97d3fcb", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "39fc60f1-5184-4c13-87e7-a54ff3db8451", "comment": "Malware payload", "value": "eceac8086b662522cd366f16e0b1f8b4ef32fda4863140edb040fd5344684e4b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807937, "uuid": "903568f4-4522-45ee-a6c7-d66a964c5cfc", "value": "T105666B46BC2D7462D6C975392F6242A43339BC049F82C7132A24BB7DE9F27588F637", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807937, "uuid": "5d6935ff-602b-4d70-9c9d-1b80e7819a2b", "value": "49152:gcK/jMFk7dvQa4TnUw7wRvHhe4+yQqwA2NvzxxKssG8I0DlivTab6ux5EQL:gcKrZ7dvQLnUw7wRvHB+yY0Eg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807937, "uuid": "35a94b01-ec19-4301-8098-043ead47bbd5", "value": 7078072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807937, "uuid": "96ea7b2f-baed-4dcd-ad88-c1fe1c0333aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f43a7be-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "c0944f2b-f971-432a-8598-673d08046611", "comment": "Malware payload", "value": "29f356711a90f1a89b3dc2057bdd9eb9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "dbe37ed9-4961-4def-9bc9-e962c816b8db", "comment": "Malware payload", "value": "e321207469d4c3fa0300fac38e14686c1fc6e7d2812f46fdbcfe28cfa7aa857a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807937, "uuid": "592c2c29-97f7-4b5c-b253-c6e4d2e9a8f2", "value": "T1CE764A43FC6555E8C1A9D13589629223BBB17C896B2127D33F60F3382F72BD06AB97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807937, "uuid": "53dfb0eb-d8c5-4b15-bf57-9d53a386da28", "value": "98304:Jcntva/qObQQfSNFWYr4LERDu3zHn67vEz:J2dOcQfiyERoaYz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807937, "uuid": "cb4d0efc-b452-42d1-810a-5bd18146ae49", "value": 7627044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807937, "uuid": "2ede4c87-e059-400f-99e9-d2f7c9bd9b2a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f56026a-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "dfd0fa4e-80d3-48dc-b5d6-42354994ed06", "comment": "Malware payload", "value": "0994c3449e6e833cd07c0b668b1dbced", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "8609aa15-8a1e-46e0-8826-22545dec378f", "comment": "Malware payload", "value": "01cd84c99cc026cfe9147dd611e7cba5d3e7bc6c6eed31c59b21ab8119279fce", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "65a479f9-45ff-44cd-a068-cb84f122dad1", "value": "T1555608C1E9A1D24AC63D6D31EFE6EFD8D3272E315D885A4AC9C4F33E1CB214580B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "1dca49db-4f1f-423a-9783-371dccf16e34", "value": "49152:841oe4TQ0RxrjXGiXNNNr42SDCAfPF+85PhnGomkqiHxwt5Eg:841oe4T3R5jfdNeNZ1RwjEg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "fc39f317-6734-441c-a43c-e8c068aee3a4", "value": 6422712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "2de4e526-5ce9-4743-b0ec-a5d49fa32952", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f566422-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "d23ede55-7a14-40e1-8ca0-8b58ab15e92e", "comment": "Malware payload", "value": "c7b38240306cb5ec12c373cffc8b4c0c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "de6a7073-7b7d-439d-a456-a244be035053", "comment": "Malware payload", "value": "ddf667ff96d1aedeca398f9b7245dc8bd55fda4a895a52b700ed3e65e9b8ef88", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "4d94bef9-075f-4d04-a7b1-3cf4a916b032", "value": "T14F766B09FD649FB1C6A402B689B812542371AC026FCB4717A634F33CFCB66D4EF466", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "e58a6927-2eb2-4aae-8239-cd473d665701", "value": "49152:zICakRmoU3x6SjUHSB8cgD5bWyP6F9J1wPssG8I08dIf3uxAu30l9cYqEPUXyVPn:3akRm16SjUHSB8cgD5p3UEPjVYE9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "fbb8cf88-389d-4471-a7ee-424afc74f765", "value": 7209144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "465f091b-86b4-4a6e-910d-9fc28f865199", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f57ce73-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "eef770f3-318b-403d-b49e-5c25d9bef47e", "comment": "Malware payload", "value": "89ecb7e305ac07ec73ed1b0e0c343471", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "d996171c-a2ba-4089-b2ec-2fb1c3bcc11e", "comment": "Malware payload", "value": "f2ec46edc68636190246fdbee765d7599c1361d996f5a64503a06137438d9832", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "5888b954-4feb-476f-8567-ed2788d2d79c", "value": "T172566C0EFE248F71C654037649B902941370AD02AFC757166634F33CFDBAAD4EE46A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "57ed45b7-7fc7-4d17-b5a1-4ed195616605", "value": "49152:CFVcDwBHFe6NHCo08u/LoTQ3NdIfudJuV0l9cUtDwR5Ed:AcDwBFNHCo08u/qENwnEd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "c5a524e0-25ed-4954-9662-ef1543202c3d", "value": 5898424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "586a6701-37df-478f-a219-c74f23be4ac4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f587113-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "69acaead-312f-49ca-af55-e5b5dba1e1bc", "comment": "Malware payload", "value": "5edbb61ed4ffc29faa668526316eb306", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "cf878985-18d1-404f-a8bc-715ed37eed66", "comment": "Malware payload", "value": "98a1a78e72710d4fbb066ca7e1a3b09829c30a14f4a4002046b0c209ef22070a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "190e3125-10ea-423e-b608-bea65b50cd32", "value": "T1585618C1E991D24AC63D6D31EFD6EFD8E3672E315C885A4AC9C8F33E1DB214580B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "87eb3a94-16be-48de-afc1-2338521853ed", "value": "49152:MuW1oH4TsOtnGWAXD/VgTHgDiBvPF+8jPhnGP80Hxwt5E+:MuW1oH4Tht50D9vyCRwjE+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "38b09bd5-41ff-4207-956a-3ae09a1a134a", "value": 6422712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "e56a3c5d-f89b-46cc-ba76-b02cd19817d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f6f6984-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "a61b0e4e-4bb1-4911-87fd-ae485e284711", "comment": "Malware payload", "value": "731a53982e00429aeae2eb428f69f8ef", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "3a2f4c80-c932-4cd8-b256-98b64c35eaa3", "comment": "Malware payload", "value": "1db448d9c7ecaeb880c6ece94bc0b5aa3544648c7199dfe9e300af62b0c08dc5", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "1c9a0100-40d0-49c4-b5fa-bd6a59689f74", "value": "T1B6562797B8924942C5E43637B9BE81C433635EBA9B8B52566D04FE3C3EBE1D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "ae59c46e-556f-4e8e-b60e-b74d4ed2b35f", "value": "49152:xnslP6tvkK9Ezp0Le+R/Xu4bk6h+9hbFv5r4j5Ex:xnsstL9Ezp0pftaJFgEx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "869ca7dd-ccd0-4efb-a1ce-ac9c53a78f74", "value": 6095032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "f1271f9e-19df-4a74-9160-5673fe0c2a26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f78ae0f-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "9b88a6e0-48d9-4cb0-b4ad-adae7c3d4609", "comment": "Malware payload", "value": "48560a27b2eaeb0cd6d6199999790efd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "e7a33819-d3d6-4e71-8dc0-daeff1b42630", "comment": "Malware payload", "value": "15089e2ea4154b4361180e737d38fd66d3c85951dafa534a121101dc97d29b55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "cd4a5cad-629e-413d-a63c-29eb3c940b1e", "value": "T1278618C1E991D28AC63D6D72EFE5EFD8E2672E315C885A4AC9C4F33E1CB314484B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "8683a62b-1803-495c-a3c3-caef19999d54", "value": "49152:P1kMdZ8f7wux2yq3ZMSlU6MyaVpqFa9KssG8I0CPw+wXeCYTIvMSrP361vp5uFJ9:P1kMdZ8fE2RqL1R9MqRwjEL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "95e67713-ebf7-4d43-9254-b4855c601c03", "value": 7930040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "f0d4e19a-c1c6-49f5-81ff-ea233618cda9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f7951c7-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "8afb7e43-1853-4e6c-96c3-29fed1b86b31", "comment": "Malware payload", "value": "fd6a7b079cee0bfd8462d78649b71fd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "eddbc8d8-d034-411c-bd1a-785adfba1634", "comment": "Malware payload", "value": "b200703810583d2ef507b7c7349cb7563414aaffc0e9ff16f875158931cef336", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "4cbabcff-edc3-40fd-ae1b-c69df39bd48e", "value": "T1AE660955BDC22F6AC1DC137454FE625662603E458A96073323E4EBF83A7773CAF468", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "262f3375-008a-4bab-809d-45e0c2b17eaf", "value": "49152:wgEFvlxixDv68wl2ROH5iguYpZfuE5m5EH:wNdlQxDC3VI+8EH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "6d88fc1b-e55b-4c5c-87e6-c0f370ed51d5", "value": 6750392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "7af6aea1-9089-4657-8e1a-37d1442da9fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f81bb13-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "253cbb84-3568-44fd-aed3-199d1c9343e4", "comment": "Malware payload", "value": "d73a34afecea3746f00fb83812aa9374", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "790569df-7247-4d07-b46e-58f8237f3451", "comment": "Malware payload", "value": "dc28c611331aed921efe5a499564b104cc9462844ec98127d83c2845fce3ba52", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "8039d5e8-3391-407b-ae85-879028fad89b", "value": "T177763911FECB14F6E943193145ABA23F63325D058F24DBE3EA407F29F9B7A9519322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "b138f1a9-2dec-49b1-a9fd-65134b59d260", "value": "49152:D0XbyL+GMXf2djWWj07+1T6By2/Cswsj5zB0emHrLIWoYCk1PQswkAhZPpmfssG5:QLyS+80372bdBiPfofk1Wr5ZHEtC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "a9be8587-edba-49a8-8f6f-5d0c66fc677c", "value": 7319736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "b181cc28-8e32-40d3-af84-15d80cb57a3f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fae9199-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "ac24ffb7-72df-4328-87c0-98700a00b39c", "comment": "Malware payload", "value": "dc471ca4d6780a8fb3c7e4f5375aa735", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "f0131305-0b7a-411c-9fe4-713ccacd64b0", "comment": "Malware payload", "value": "60ac99f762e7d6608544e75c4bb3b545d70f3bde8f46259d2615639440e3662c", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "62527f9a-14d2-4bad-a7a5-98094d51f852", "value": "T18E761997B8824952C5E83A37BCBE80D433631EB99B8652166D04FE3C7EBE5D90E357", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "c1f6fa76-b7e8-4b9a-8b2c-613e1fe0232d", "value": "49152:2slYDmlif5BDXSzZkgkPV5gNHKX4ZlassG8I09LMNcSFIUTVyeq5ERl:2sli155XSzZkgjELWcuxkEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "98907b55-dd8b-4289-bd9b-a4fef82e89a3", "value": 7405752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "4f1b1526-3fb5-4ef3-9e12-62a05cb75e72", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fd87a2c-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776807938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "492e70ce-932a-44b7-aaf6-7c559e139f19", "comment": "Malware payload", "value": "0635612a5c3cee5b1d3fc16564410e7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "d1ab3c0d-f466-467b-897c-2decd8582ce2", "comment": "Malware payload", "value": "fbe6eca5be75d5e22af831f9b3f77247355d183d8dcb3e7c4e18ec3ca08a7bbe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "97c9b307-296f-42c8-b44c-239ff9427368", "value": "T1E28607177B19EB1ECB1821300CB2CA94276A2C9942D69517B781F319F9F30BC996ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "0cdc14c1-82b3-4df0-b735-0a47e95e9b41", "value": "49152:xFX3cYpF3JZEfxBp5KcwAJLj2aX7k/3DprpH69qRTj6Yf/OassG8I0H8ueQS8JYd:ryLaNRT288kKBLNXi2HJRvjEC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776807938, "uuid": "170c91b7-8dc6-407b-846a-4c45a697a2b9", "value": 8323287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807938, "uuid": "6f4e966d-437c-4747-92ae-07d4e7563c3e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4301cc-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776810620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "9afe7cb2-8bd2-41d8-9674-c255f5ae10f6", "comment": "Malware payload (Mirai)", "value": "963af3af6ed289a651be7a996e45d732", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "71601d6e-fb6a-4196-8209-11f79956c1ee", "comment": "Malware payload (Mirai)", "value": "f94e7cf6e5f9005f3579e5373d049e417297e4cc267c41e2c63d2a2126552b5c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "49b2a60a-33dc-4f37-bdd2-7604f37161a2", "value": "T13B93080ABA919F01D5D631FAFA9F414D33536BBCD3EA3102D920AFA037C69DB0E665", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "8b90d7b6-4957-40f0-80f7-91a9ff262d6d", "value": "1536:KlnK6vU2DGyvelXkk0JuWkz/MxI08wUiqrG1pgQugdlu+iwB4an2vGY7N/qn:vqGtSkvwUiqrG1pa3wB4an2vG6/qn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776810620, "uuid": "1ea58328-b71a-4ab1-90e9-62887a94db8b", "value": 92132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "aa8e7790-8d54-40b5-ab56-77b7b06b3118", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae484b4b-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776810620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "5035fbe9-ad99-4cad-95db-443f9a5b585d", "comment": "Malware payload (Mirai)", "value": "49e7cefd2b116ed1e51aa86af564ab8d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "9166cf23-3b3d-4759-b37c-89f396e4b5d2", "comment": "Malware payload (Mirai)", "value": "e8755beab3b011d91269c15a21cbc810536e66426c27a4b7d69b160f350ff6b7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "4dfbbe33-46e5-4e5b-8814-0c2e92570943", "value": "T1E0F21B075900662CDED1A8F4C90ACF21DC117A445E6F25C7F2E4FD564ABA3D8AD2FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "d4470afa-08a8-4d08-a1ef-ea3738d0bcfc", "value": "384:8vz8PQ4SUWJ0y9U2dLqcw0PYpGuZgL3g0nCeaWnVLrN3dwXDEZZDiJviNHtN7b69:8v8tSJ9XYZZgk0nC4XslVdEkSbG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776810620, "uuid": "7ac7a573-5038-40d6-afc3-0ff95dc091f1", "value": 36460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "e53ff7f2-1775-4fe0-9e26-8d358fcabc47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4b6fce-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776810620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "1bf82574-feb5-4566-bcdf-7732dab5c3fc", "comment": "Malware payload (Mirai)", "value": "b5b808c18cfed0634f394d35376e90be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "4c80f37c-30a2-4837-a243-f6a82e0c73b4", "comment": "Malware payload (Mirai)", "value": "8bbf0d368ac691acc6c185edcadf658e332120f218fc421dcc140fa29cd24e80", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "b21ab876-de16-4da2-9bf4-5d752eb65235", "value": "T1C353F746B982CF03C5C261F6BB9F426D3B1177ECD5EA3207E925BFA03B464D61D2A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "211b83aa-a225-4e72-878a-6b149db74515", "value": "1536:W6QoH4zMlYkl/KDHs8A+zQjXO0LklHNTocQRuROd:W6ZYzMljZKDM8A+zQ4lH6crRO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776810620, "uuid": "27578aa7-0814-4d7a-82eb-1b6252f3a868", "value": 65412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "90a0473e-debf-416a-a84d-73218b672944", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4bf6b8-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776810620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "b433fbc1-58cb-4378-8433-339b0867c364", "comment": "Malware payload", "value": "85c3f6e2a6488aa17718b3687f8ac094", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "56874db1-dedf-4de5-895c-7f23d45a5bf8", "comment": "Malware payload", "value": "13af144a88b47447440f8bdb778e52c7798e048dd5a6a92b073835001eb3dbb2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "78f727e7-3008-4287-8466-12603fdeb8bb", "value": "T174630846B9828F03C5C261F6BBEF42AD371267EDD5EB3207D925BFA03B464D60D265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "7ea150da-98b4-4daf-a72f-f05a2c119622", "value": "1536:0Jjy7MfX2F8nOoujNOnFKeNumWcr4wvnpO:0hy7Q2F8nOouTeN4enpO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776810620, "uuid": "71737755-97a1-48ca-a2cc-dd4a54e6a772", "value": 67256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "485af9c6-b7f5-4005-a5a2-194e1ebea544", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4ccb63-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776810620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "8958c16d-f655-4834-838e-1d9c2119633e", "comment": "Malware payload (Mirai)", "value": "29ee5ae4ac935fcb6dd47d9f8a5aa8e3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "488f2f37-1858-437b-add5-1e7d92a804f4", "comment": "Malware payload (Mirai)", "value": "404407084230856208e5d1ab6ce7bdcd36addc5b05759fe4edc65238a01823f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "941c6252-cf9c-4f50-b7ff-697243bc874a", "value": "T146839606BF214FF7D8ABCD7746F90712349CA91621A83BB5B534E468B34A18F05D39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "d1e8c9ed-2ae0-4445-9562-f7d1581edd3d", "value": "1536:cOuEFa6pStRCKVyJwNmuKmIO/O7vv9u6glcZam7DZ0XAV:cf/tR0JE4O/a9JamPyXA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776810620, "uuid": "00e93e1e-3472-4fff-855a-c707f68628ae", "value": 87668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "cec48255-a1c7-4f23-9876-2201129474a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae52a72e-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776810620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "7263a163-4311-40cc-ad05-5e4ea75ec08d", "comment": "Malware payload (Mirai)", "value": "f7459bc26baf2db287c39770f6a1e19c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "8a4283ed-e41c-4678-a28d-3f03267e2a92", "comment": "Malware payload (Mirai)", "value": "2e6ff09733af439cf1b67b91d5919942527efe946729e36c096413a44c37d024", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "bbc7e9b2-b115-4583-9ba2-f67f58cc0f18", "value": "T176830803EA41C47DC097D1704BEF9536D6A7B8BE033231196794FFA12F16AA0EE792", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "2c62724f-6a60-4a11-961f-ae67c2d3dfce", "value": "1536:YSMgYM5XAfMSvNRtvxDbzzFXJMZ8j65nUliINjwbpAii5jy:9zuB/88pQbLi5jy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776810620, "uuid": "0432f9a2-ae9b-4db3-8129-595c75a13236", "value": 82376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "4843e65c-c647-4272-92b2-202e11a65a05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae5fd8e3-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776810620, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "08a545b7-018f-40a3-b421-0df6c9786dba", "comment": "Malware payload (Mirai)", "value": "52e242b97827e6a3c3e5ac0202214fef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "edcec2c3-70b9-46d1-b9bc-3ed36a3aa249", "comment": "Malware payload (Mirai)", "value": "ab50882f051add575c083b5ec856f0493166676a0161c9c85bc6ef85102c3331", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "6c6440e2-b0fa-4d0b-8fb8-341b0b68bcfd", "value": "T13C635C02B70C0F43D4532DF02A7F1BE09796FD6226B2A1807919FEC94671EF26546F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "dff1fcd3-c31a-46e9-b214-702a661853c0", "value": "1536:7RDLzauIvQxrddatYjqk96YCtaz2/1uWW:cXmdaeIYs6eXW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776810620, "uuid": "d5480216-3722-45d0-859f-9ee3b9ba4b2f", "value": 67344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810620, "uuid": "2b633f82-6ef5-4ae6-8c36-5ebadf906399", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1235285-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776810625, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810625, "uuid": "ea869b4f-0cd0-42f3-9391-c4391c475bea", "comment": "Malware payload (Mirai)", "value": "da6f6519fd94ce46b7f579dbfe25c5cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810625, "uuid": "8067a431-1efa-48cf-b821-af37afcac89c", "comment": "Malware payload (Mirai)", "value": "ec05747ce3ba5d9bf1f1c66d9696f9b3dfbd26bcb82d0588b77879369533c5d2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810625, "uuid": "49c414f3-5d45-4015-9653-19bbb54d1677", "value": "T1234327439E06AF46D14BA1F062F28E798B52FC694A631EF9A565FEF44143DC8F0093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810625, "uuid": "c4806f3b-fdf8-4686-94e4-aefc3e2deaa0", "value": "1536:lTV6gEft3RBYF2ADnlhCWRX7KFMC0KNFrLGG88Z:mJft3LALlhrOFM2zFZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776810625, "uuid": "6409f526-67c5-4ac8-ae1d-71e490fb06fd", "value": 59612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810625, "uuid": "97e30a26-52f1-4f6c-be0f-45132d98585b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a397aa17-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776811891, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811891, "uuid": "bd37f5cd-3547-4480-9b26-26a2c7ac40b1", "comment": "Malware payload (Mirai)", "value": "621b0e38520e465fbc1650ea23636cc8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811891, "uuid": "b76258bb-b562-4eb4-ac05-c89c66c1c131", "comment": "Malware payload (Mirai)", "value": "d4f0c75cc901dd5941875bf83628c3ae3084acf567488ea7e37712130ed060c0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811891, "uuid": "be4c8807-2d6b-4b67-b2f3-5535d9ecc901", "value": "T1009312C726C6567389BA0532CE7AC28631C58D7C8DB7E000674B9B2D5533E0E617A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811891, "uuid": "f09a4152-fda6-4796-97e6-95240836a1c8", "value": "1536:Xi4DoETPeRirmg3p5p8RM0rsXw+NGf44MD6I3xUu51FZgB7ih8lBT/8ccPkn42kU:ZjPe9g3pgnrQa44WfrsBe2sDk42kAekt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776811891, "uuid": "49d2c751-596c-4b69-80ec-13ed71e17832", "value": 90888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811891, "uuid": "deb2c5d2-b1e5-4f2c-98ed-87c470fb09d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "381ba4c7-3dd5-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776813362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776813362, "uuid": "1da8b6c1-c70f-4f7f-aa8e-936939d98d5e", "comment": "Malware payload", "value": "fa29bbbf983ffda4e177e5ab493ebdd0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776813362, "uuid": "a7c4f927-c273-4e51-b4a2-292babfde26f", "comment": "Malware payload", "value": "0b84eb02038088181afabfd21487aa9010a300eeae2aa3324a07fe28e690e9c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776813362, "uuid": "edeab486-7864-416d-9d2e-cca63935fec2", "value": "T104530223D3269DACEEFB41F38D09A5D51F75AA9153D2DCC1F3EB4B911431263A100A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776813362, "uuid": "9d15fb9b-3ab0-45f4-8c48-02f74fe3d150", "value": "1536:hO02HBibG4orju2tX42xfeUOz1eOt31BSjcU5G4u+qgw06WX8:Y7hVS2hxWUQ1eM31BSjcqG4u+qgwXWM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776813362, "uuid": "fcd8bf50-0171-4ada-80de-0a1bff3dd85a", "value": 61708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776813362, "uuid": "734a39c0-507e-423c-b95e-37f298115aaa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776729629, "uuid": "1bfee47b-3d15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunnyd-ay1.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776729802, "uuid": "82d92b0d-3d15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.128.113:52717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776729909, "uuid": "c2c269a8-3d15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rainynight2.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776729916, "uuid": "c6f24c9c-3d15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:37786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730269, "uuid": "9928f300-3d16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-sky3.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730580, "uuid": "527d32d4-3d17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.234.138:34116/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730628, "uuid": "6ef2ea70-3d17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.23.135.246:35197/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730630, "uuid": "70320188-3d17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldsn-ow4.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776730930, "uuid": "235a1f56-3d18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmfire5.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776731227, "uuid": "d44437af-3d18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.23.27:55263/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776731288, "uuid": "f8ea057b-3d18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-moon6.sylo8ren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776731293, "uuid": "fb68e057-3d18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:59411/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776731348, "uuid": "1c476a78-3d19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:37786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776731423, "uuid": "4949ddba-3d19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.123.253:60683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776731534, "uuid": "8b2ab62e-3d19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-load1.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776731890, "uuid": "5f2ac16e-3d1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lightp-ack2.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732126, "uuid": "ec36be57-3d1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.23.27:55263/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732126, "uuid": "ec501173-3d1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.23.135.246:35197/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732186, "uuid": "100fcca5-3d1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fullbox3.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732313, "uuid": "5b9d7933-3d1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.165.108:40861/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732550, "uuid": "e8ade2cd-3d1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://emptys-pace4.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732728, "uuid": "52cbeff1-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.250:40588/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732740, "uuid": "5a4c6c79-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.127.101:40062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732741, "uuid": "5a78655f-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.37.212.197:43460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732920, "uuid": "c5ab7dcc-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.203.123.253:60683/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732921, "uuid": "c5fc80e9-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.29.46.195:43547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776732969, "uuid": "e29692a2-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickmove5.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776733159, "uuid": "5394fbc9-3d1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.197.229:36570/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776733209, "uuid": "71963154-3d1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-point6.kymle6rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776733273, "uuid": "979e238d-3d1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.21.70.189:46293/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776733327, "uuid": "b7cc3be6-3d1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.236.250:40588/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776733629, "uuid": "6c00e1a8-3d1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-tray1.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776733877, "uuid": "ffa8453f-3d1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.21.70.189:46293/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776733928, "uuid": "1e08707a-3d1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glassb-otl2.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734120, "uuid": "90732335-3d1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.99.165.108:40861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734177, "uuid": "b2dbf221-3d1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.127.101:40062/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734178, "uuid": "b314c520-3d1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.127.58:55430/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734226, "uuid": "cff1d734-3d1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smalllamp3.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734356, "uuid": "1d9413f1-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.84.222.217:34875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734422, "uuid": "44a38f35-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.67.205:47368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734527, "uuid": "835fa976-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.190:37503/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734589, "uuid": "a84a0671-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-pa-per4.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734708, "uuid": "ef34c553-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://75.118.179.93:41773/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734708, "uuid": "ef34f4b2-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.125.47:48099/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734709, "uuid": "ef73f89c-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.205.195.146:33352/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734709, "uuid": "ef93cd9f-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.213.235.26:49905/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734709, "uuid": "efb04391-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.164.98.99:33965/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734709, "uuid": "eff156b0-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.232.160:52193/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734710, "uuid": "f0366857-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.44.153.19:53012/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734714, "uuid": "f2e05cc6-3d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.34.169:34153/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734767, "uuid": "1204307d-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.2.25.142:33487/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734767, "uuid": "128005eb-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.79.85.69:6044/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734767, "uuid": "1280a53b-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.158:56889/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734767, "uuid": "12914d72-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.44.153.19:53012/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734768, "uuid": "12aae84d-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.53.138:55571/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734768, "uuid": "13092182-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.241.74.138:33145/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734768, "uuid": "130bb31b-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.23.80.137:48453/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734768, "uuid": "130f20cb-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://139.213.32.135:52647/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734828, "uuid": "36682351-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.162:52499/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734828, "uuid": "366869a5-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.114.123:39967/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734828, "uuid": "366fce1f-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.192.153:38211/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734828, "uuid": "36944727-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.213.235.26:49905/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734828, "uuid": "36b2e9d6-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.218.57.214:60999/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734834, "uuid": "39f61b02-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.12.165:56570/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734886, "uuid": "58f54876-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.164.98.99:33965/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734886, "uuid": "5953367b-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.62.95:34258/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734886, "uuid": "5971b69e-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.14.83:37391/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734887, "uuid": "59e3b5bd-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.249.251.152:57693/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734900, "uuid": "61bcb772-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.118.20:48064/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734947, "uuid": "7dbb9acd-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.35.228.16:36932/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734948, "uuid": "7df64d39-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.46.200:48596/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734948, "uuid": "7df954ec-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.48.186:40416/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734948, "uuid": "7dfd3486-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.3.11.210:52981/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734948, "uuid": "7e1516e2-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.140.177:48263/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734948, "uuid": "7e16d8c9-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.206.140.177:48263/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734952, "uuid": "80d0bf33-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://faststep5.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776734961, "uuid": "862e682c-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.131.52:42660/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "a2e20b59-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.244.36.34:43152/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "a3394423-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.53.138:55571/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "a348b73b-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.159.74.226:22142/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "a3490aeb-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.46.200:48596/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "a35a0bda-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.131.52:42660/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "a35b0141-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.92.204:58013/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "a360a3d3-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.14.83:37391/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735010, "uuid": "a3638421-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.228.109.209:53896/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735011, "uuid": "a3765a38-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.244.36.34:43152/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735011, "uuid": "a377ecb9-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.65.240:60301/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735011, "uuid": "a3c2be7e-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.91.179:44214/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735011, "uuid": "a3d500b2-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.229.235:51959/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735011, "uuid": "a3dabeaf-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.229.235:51959/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735011, "uuid": "a3df06fe-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.89.182:44943/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735011, "uuid": "a3e3c5ff-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.91.179:44214/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735026, "uuid": "ac72409e-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.192.153:38211/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735066, "uuid": "c4aa361b-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.231.108:58979/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735067, "uuid": "c4ccd32a-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.79.85.69:6044/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735067, "uuid": "c502e85e-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.200.236:41439/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735067, "uuid": "c50408f6-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.218.112:52416/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735127, "uuid": "e8f63641-3d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.89.182:44943/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735187, "uuid": "0c6b0695-3d22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.68.190:37503/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735253, "uuid": "341ead1f-3d22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cle-arbox6.wate7pugnac.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735547, "uuid": "e341d2f9-3d22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-wind1.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735548, "uuid": "e3a0a7cf-3d22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.0.32:36389/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776735847, "uuid": "95c20472-3d23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-cha-ir2.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736034, "uuid": "058a767c-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.206.151:33306/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736090, "uuid": "26e887af-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.109.167:57529/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736090, "uuid": "26edf4ed-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.243.65.33:38843/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736090, "uuid": "27044c5b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.214.149.164:49911/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736090, "uuid": "270a3937-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.218.112:52416/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736090, "uuid": "270de5ca-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.63.189:47545/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736090, "uuid": "271798ce-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.138.147:36311/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "2726b6e3-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.231.230:33928/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "2740321b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.96.32:32873/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "27403aed-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.191.25.150:47353/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "275a0291-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.12.27:57114/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "275a0ce4-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.136.96.171:47500/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "275ebcee-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.73.222:44068/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "2767715e-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.157.29:35723/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "2768ad3a-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.70.109:49781/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "2768ad64-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.23.74.213:55017/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "27778502-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.94.32:57017/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "27778947-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.189.30.220:39967/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "277b1663-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.45.103:34884/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "277fd944-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.91.16:51299/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736091, "uuid": "2786e6bc-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.152.157.149:38327/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736092, "uuid": "27c23de6-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.162.161.96:54977/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736100, "uuid": "2cc88da7-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.149.31.4:40109/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736101, "uuid": "2d207d52-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.253.100:35666/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736101, "uuid": "2d6eae3b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.169.66.166:46337/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736150, "uuid": "4ad8e8a8-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.197.229:36570/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736150, "uuid": "4adc72cb-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.219.129:56473/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736150, "uuid": "4ae1b0d9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.210.175:51379/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736150, "uuid": "4ae3ba6d-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.219.129:56473/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4ae8a8aa-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.91.16:51299/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4ae8b84b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.229.129:45869/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4ae8ba61-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.122.58:44083/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4afa8bde-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.14.226:50437/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b025794-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.152.157.149:38327/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b0b25ec-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.181.118:57529/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b46d58d-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.98.81:50225/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b472130-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.55.20:42024/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b4ae137-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.187.182:44194/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b4b06a6-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.152.64:38038/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b4ec5df-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.52.112:33589/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b522c3b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.163.24:47720/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b61f0b9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.214.49:54653/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736151, "uuid": "4b6d6e07-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.235.220:34768/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736152, "uuid": "4b93a124-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.113.53.214:35863/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736152, "uuid": "4b93b1d1-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.232.210:59412/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736152, "uuid": "4baea255-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.191.25.150:47353/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736156, "uuid": "4e5f9b6e-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.165.236:51638/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736212, "uuid": "6f706568-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.11.39:44336/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736212, "uuid": "6f7999b4-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.187.182:44194/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736212, "uuid": "6f82ea47-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.206.151:33306/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736212, "uuid": "6f98d0d8-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.88.221:45987/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736212, "uuid": "6fa784b9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.45.103:34884/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736212, "uuid": "6faac768-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.151.165.236:51638/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736212, "uuid": "6faac773-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.94.107:33769/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736212, "uuid": "6fb09e92-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.202.83:46327/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736212, "uuid": "6fd6f71e-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.109.219.21:54244/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736213, "uuid": "701d9e4a-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.225.171:57103/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736213, "uuid": "702c4f14-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.80.179:52444/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736213, "uuid": "702fe862-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.81.50:58938/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736213, "uuid": "70316989-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.158.31:59140/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736213, "uuid": "703b700f-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.161.192.225:46189/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736213, "uuid": "70516c1e-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.28.30:41179/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736213, "uuid": "7056fb6d-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.147.237:55471/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736213, "uuid": "7057d943-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.28.30:41179/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736214, "uuid": "7078878b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.173.21:40509/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736214, "uuid": "70aba684-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.71.169.3:39471/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736214, "uuid": "70b15b46-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.110.112:46511/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736214, "uuid": "70f1444e-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigwall3.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736221, "uuid": "74d9253c-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.52.12:52912/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736271, "uuid": "92ec5ac9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.245.195.38:43822/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "9313dfc5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.55.20:42024/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "93158362-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.55.152:60983/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "931e5faa-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.127.117:40518/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "931e85d4-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:57505/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "9320120a-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.63.189:47545/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "93238317-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.88:53735/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "932b7535-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.98.81:50225/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "93356104-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.70.109:49781/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "933878f8-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.152.64:38038/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "93394186-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.173.14:44279/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "933a978b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.189.30.220:39967/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "9340125c-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.52.112:33589/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "934150d2-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.162.161.96:54977/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "934a8d37-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.118.140:47229/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "9350b176-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.28.203:45402/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "9355cbad-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.152.232.95:59846/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "936233a0-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.148.197.150:33028/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "936c06a8-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.153.249:60510/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "937b3eb4-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.32.161:43109/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "938fb4a5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.173.54.131:60896/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736272, "uuid": "939198f9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.9.123:33543/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736273, "uuid": "939fd503-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.98.224:52257/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736273, "uuid": "93a2798e-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.234.30.7:44501/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736273, "uuid": "93b6e522-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.229.110:54000/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736273, "uuid": "93ba6351-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.173.54.131:60896/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736274, "uuid": "943f67e7-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.121.199.3:31642/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736274, "uuid": "946b1467-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://151.42.171.194:45872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736280, "uuid": "9813d4c4-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.235.109.245:56344/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736326, "uuid": "b3af732a-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.10.44.142:64613/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736329, "uuid": "b5876ff0-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.9.123:33543/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5a796e9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.110.28.203:45402/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5cf52b8-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.32.161:43109/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5d335c9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.7.165:44712/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5d35d9b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.7.165:44712/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5d88ed5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.81.50:58938/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5e439c5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.229.129:45869/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5ea837e-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.38.149.164:49606/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5eaf030-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.202.83:46327/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5f06c63-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.71.169.3:39471/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5f30ddb-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.15.56.127:53745/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5f31c34-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.153.249:60510/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5f8d90f-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.110.112:46511/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b5fc5134-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.186.229.110:54000/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b610ddac-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.159.165:46558/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b61c401b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.105.58:44937/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b621937c-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.40.220:47095/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b6279dbe-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.206.110.4:43625/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736330, "uuid": "b630abb3-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.69.227.89:35882/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736331, "uuid": "b645a3e6-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.233.241:56604/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736331, "uuid": "b6519b90-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.69.13.106:60207/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736331, "uuid": "b65473cc-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.49.196:48924/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736331, "uuid": "b6577ca4-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.175.33:40944/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736334, "uuid": "b8027289-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.224.223:53323/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736337, "uuid": "ba35ddc7-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.235.251.85:60831/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736341, "uuid": "bc6f09b0-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://68.235.251.85:60831/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d84d96f2-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.67.205:47368/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d871349b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.73.222:44068/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d8765bd3-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.11:38759/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d8802e4e-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.157.29:35723/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d882518f-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.49.26.178:44714/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d883d70c-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.11:38759/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d8867bb5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.233.241:56604/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d88b26e5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.235.220:34768/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d88b5e4a-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.132.147.237:55471/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d88d7fb6-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.152.232.95:59846/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d88d87a9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.94.32:57017/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736388, "uuid": "d89875b6-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.127.166:52992/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736389, "uuid": "d90736b2-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.214.149:52583/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736397, "uuid": "de03beed-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.53.69:50615/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736399, "uuid": "df3caeeb-3d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.149.31.4:40109/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736456, "uuid": "010c1dea-3d25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.48.56:33520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736456, "uuid": "01152206-3d25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.251:52320/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736568, "uuid": "438d2208-3d25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-vi-ew4.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736579, "uuid": "4a74b418-3d25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.195.156:35605/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736817, "uuid": "d833f1f2-3d25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.199.74.85:51885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776736869, "uuid": "f72eff52-3d25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldwa-ter5.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776737117, "uuid": "8b42c509-3d26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.120.230:43757/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776737228, "uuid": "cce8547e-3d26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.26.37:42585/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776737229, "uuid": "cdce40d9-3d26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://redbook6.overfeed-social.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776737351, "uuid": "16a946aa-3d27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.70.124.58:46148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776737371, "uuid": "22269ef5-3d27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.175.123:44673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776737528, "uuid": "8031cc5a-3d27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-app-l1.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776737890, "uuid": "57bf8a0a-3d28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-bun2.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776738075, "uuid": "c5ce55d3-3d28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.78.251:52320/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776738250, "uuid": "2e8a2b11-3d29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hottea3.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776738548, "uuid": "dfc7e0f2-3d29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-m-ilk4.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776738846, "uuid": "91acfd40-3d2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-stone5.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776738851, "uuid": "94549df1-3d2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.0.227:46636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776738977, "uuid": "dfe4f061-3d2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776739026, "uuid": "fcec8e42-3d2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.114.129:32782/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776739089, "uuid": "225b095a-3d2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://49.70.124.58:46148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776739209, "uuid": "6a121841-3d2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://old-ca-se6.grabs5tatus.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776739513, "uuid": "1f1cbcab-3d2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.164.69.142:57439/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776739629, "uuid": "644aae0f-3d2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-sk-y1.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776739638, "uuid": "698ee5a4-3d2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.225:42752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776739870, "uuid": "f3f9f5cc-3d2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-ni-ght2.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776740058, "uuid": "642f2966-3d2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.105.58:44937/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776740232, "uuid": "cbc367cc-3d2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-ocean3.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776740232, "uuid": "cbcd38b1-3d2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.16.97:52865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776740527, "uuid": "7b6dec42-3d2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldfi-sh4.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776740658, "uuid": "c9956f8c-3d2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.57.42:54634/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776740830, "uuid": "301f8c4c-3d2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whitecl-oud5.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776740954, "uuid": "79b8b7ad-3d2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.241.191.103:49977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776741128, "uuid": "e1e1d36c-3d2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.114.129:32782/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776741192, "uuid": "07992326-3d30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.225.171:57103/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776741429, "uuid": "94f79146-3d30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://silver-ra-in6.condit-rearrange.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776741611, "uuid": "0189c520-3d31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.150.174:42891/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776741670, "uuid": "247f262c-3d31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-f-loor1.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776741683, "uuid": "2c6e7fd0-3d31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.243.174:43883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776741791, "uuid": "6d2ce9db-3d31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.227.138:34372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776741851, "uuid": "906106cd-3d31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-wa-lk2.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776741919, "uuid": "b9198aa1-3d31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.0.227:46636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776742209, "uuid": "661e5395-3d32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://next-door3.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776742214, "uuid": "68fe5d71-3d32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.219.68:46771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776742326, "uuid": "abe5be96-3d32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.116.17:53758/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776742569, "uuid": "3c839871-3d33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fullr-oom4.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776742580, "uuid": "43253bb9-3d33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.158.55:33054/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776742817, "uuid": "d06b0a82-3d33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.204.211.203:59763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776742928, "uuid": "12b3b8f0-3d34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.123.238:54132/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776742933, "uuid": "15e26695-3d34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://backy-ard5.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776743109, "uuid": "7e51ddf8-3d34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.150.174:42891/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776743173, "uuid": "a4bb6547-3d34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.27.180:52857/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776743173, "uuid": "a4e6d19b-3d34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://side-vi-ew6.guardiansti1l.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776743348, "uuid": "0cd7c131-3d35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.39.112:37431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776743531, "uuid": "79c24e43-3d35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-n-ews1.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776743833, "uuid": "2e1959ec-3d36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.245.107.223:51061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776743891, "uuid": "50a4a535-3d36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-ti-me2.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776743892, "uuid": "513426b2-3d36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.7.51:49444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776744249, "uuid": "25f552ac-3d37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://real-fact3.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776744310, "uuid": "4a283618-3d37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.219.99:37487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776744434, "uuid": "93f6eacd-3d37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.219.99:37487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776744486, "uuid": "b368ece9-3d37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nice-sh-ot4.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776744675, "uuid": "23f9e8af-3d38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.27.180:52857/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776744849, "uuid": "8b86c73d-3d38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://justta-lk5.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776745212, "uuid": "63e3baab-3d39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easy-ta-sk6.bag-senior.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776745394, "uuid": "d065dd44-3d39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.103.135:59660/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776745450, "uuid": "f1a4a8c6-3d39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-pi-e1.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776745634, "uuid": "5fb3a018-3d3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.92.154.218:40629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776745927, "uuid": "0e43604e-3d3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.148.170:43622/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776745933, "uuid": "11fd6831-3d3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-bun2.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776745938, "uuid": "14f5585e-3d3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.234.30:46486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776746347, "uuid": "08c423bc-3d3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-s-oup3.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776746594, "uuid": "9b8cf821-3d3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-tea4.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776746893, "uuid": "4dcf7393-3d3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coolmi-lk5.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747252, "uuid": "2414afc0-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://purewa-ter6.deer5talagmite.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747426, "uuid": "8bdee6df-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.148.170:43622/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747427, "uuid": "8c4cb14f-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.88.210:36269/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747494, "uuid": "b4265761-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://black-h-at1.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747496, "uuid": "b57ce52e-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.136.46.178:44384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747617, "uuid": "fd4f5a13-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.40.55:52597/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776747788, "uuid": "633ff8e9-3d3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-shir-t2.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776748214, "uuid": "61685d49-3d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-be-lt3.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776748328, "uuid": "a58653b8-3d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.88.210:36269/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776748566, "uuid": "3365ddbf-3d41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-co-at4.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776748750, "uuid": "a0c6174e-3d41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.205.54:34463/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776748996, "uuid": "3369ce6c-3d42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.65.215.0:42497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776748996, "uuid": "338350bf-3d42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.40.55:52597/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776749116, "uuid": "7ad9441a-3d42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://newst-yle5.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776749292, "uuid": "e407c44f-3d42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-lo-ok6.water-wagged.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776749469, "uuid": "4d302f8f-3d43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunny-d-ay1.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776749555, "uuid": "80c76d66-3d43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.255:46920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776749834, "uuid": "27024dc7-3d44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rainy-ni-ght2.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776750191, "uuid": "fbf06136-3d44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-sky3.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776750322, "uuid": "49c0bbf6-3d45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.169.104.199:40537/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776750323, "uuid": "4a43acb5-3d45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.93.53:59042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776750432, "uuid": "8b60f84f-3d45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-sn-ow4.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776750848, "uuid": "830566a1-3d46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmf-ire5.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776750982, "uuid": "d32de699-3d46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.26.86:47749/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776750983, "uuid": "d3c3c7c9-3d46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.23.255:46920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751156, "uuid": "3b216cfa-3d47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-mo-on6.championincomp.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751343, "uuid": "aa2fc27f-3d47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.65.215.0:42497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751572, "uuid": "32c8f888-3d48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-lo-ad1.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751815, "uuid": "c3e11feb-3d48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lightp-ack2.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751928, "uuid": "06da0683-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.125.194:47135/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "29f938fd-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.4:8080/c2.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "29f9dec6-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.130/bot.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "29fb1618-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.4:8080/simple_agent.py", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "29fd28f9-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.4/install.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "2a01d55c-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/2976463be_Vexaim-R6.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "2a03763f-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.4:8080/sh_test.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "2a1ac63e-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.4:8080/install.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "2a21c3b8-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/5e29793e1_Vexaim-ApexLegends.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751987, "uuid": "2a320d67-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.84.151/bot.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751988, "uuid": "2aaa0c2c-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/sora.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751990, "uuid": "2c2b3a46-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/0b1e3a8e8_Vexaim-HwidSpoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751990, "uuid": "2c3d279d-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/c1dd75655_Vexaim-fortnite.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751991, "uuid": "2c4bf2c8-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/0092d6c39_Vexaim-FiveM.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751991, "uuid": "2c4e6dae-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/449e8790f_Vexaim-Callofduty.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751991, "uuid": "2c4e933c-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/d101f069e_Vexaim-Roblox.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751992, "uuid": "2d4dc172-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/4e78a8b89_Vexaim-Valorant.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751993, "uuid": "2d8a0257-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.4/vps-agent-linux-amd64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751993, "uuid": "2d924e5e-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base44.app/api/apps/69d07bbcdc06f301ae50f975/files/mp/public/69d07bbcdc06f301ae50f975/bdcf186ab_Vexaim-Rust.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776751993, "uuid": "2da6acfc-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://markway.ru/Setup.zip", "Tag": [ { "name": "Convagent", "colour": "#fce62d", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752051, "uuid": "508a30da-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://axodoyin.alwaysdata.net/UwU.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752053, "uuid": "51bfde62-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://metotmimarlik.com.tr/wpveerus/Endevrdiernes.pfm", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752111, "uuid": "7409eee9-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://metotmimarlik.com.tr/wpveerus/vOjgNKOwObXSY180.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752168, "uuid": "963e17dc-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://full-b-ox3.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752230, "uuid": "bb2eaf35-3d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mosselnet.co.za/April_Staff_Appraisal_4qsK_pdf.arj", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752469, "uuid": "49346bfa-3d4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://empty-s-pac4.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752600, "uuid": "9798eacc-3d4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:53881/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752773, "uuid": "feb032ee-3d4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickmo-ve5.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752829, "uuid": "2009108d-3d4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.catbox.moe/jwhxzz.bin", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776752898, "uuid": "496511b2-3d4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.92.76:60753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753129, "uuid": "d31be51b-3d4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-po-int6.tarny-tsedilka.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753489, "uuid": "a96b5e37-3d4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blu-etable1.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753729, "uuid": "3889f36e-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753729, "uuid": "388aa756-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753729, "uuid": "388e2667-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753729, "uuid": "388e3ed1-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.ppc440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753729, "uuid": "388eba31-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753729, "uuid": "388f690c-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753729, "uuid": "38920c55-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.182.70/hiddenbin/Space.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "3a042196-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "3a09027f-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "3a0d7336-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "3a0d8c8f-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "3a0ddad8-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "3a16c97a-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "3a1a12b0-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753732, "uuid": "3a209e65-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753790, "uuid": "5c9ebd44-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenlamp2.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753797, "uuid": "6149841e-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753797, "uuid": "61498547-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753797, "uuid": "614cb7ec-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.226.174.212/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776753976, "uuid": "cbedb13a-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.249.4.20:53881/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776754150, "uuid": "336a69a2-3d4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-cup3.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776754222, "uuid": "5e611432-3d4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.253.80.60:48921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776754510, "uuid": "09c616b2-3d4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-wa-ll4.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776754516, "uuid": "0d7660c7-3d4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.12.132:33929/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776754749, "uuid": "98c0ac7a-3d4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldwind5.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776755056, "uuid": "4f3a8def-3d50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.142.253:56292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776755111, "uuid": "7060494a-3d50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://highstep6.9zoravel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776755226, "uuid": "b4c3ee23-3d50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.207.105:42251/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776755469, "uuid": "4568b918-3d51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-run1.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776755770, "uuid": "f8cbf1d6-3d51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://slowwa-lk2.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776755779, "uuid": "feb22178-3d51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.253.80.60:48921/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776755840, "uuid": "2308ed96-3d52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.240.175.123:44673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776755897, "uuid": "44babf9c-3d52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.237.48.56:33520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776756071, "uuid": "ac771ff6-3d52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigjump3.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776756195, "uuid": "f66ee2d3-3d52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.184.122:49912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776756324, "uuid": "42fa0abb-3d53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.112.2:60780/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776756429, "uuid": "818a8ede-3d53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://longro-ad4.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776756727, "uuid": "339805b1-3d54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://newtrip5.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776757028, "uuid": "e70f9400-3d54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.207.105:42251/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776757088, "uuid": "0adecde3-3d55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://old-town6.ra1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776757451, "uuid": "e30f0ee8-3d55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://openbook1.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776757752, "uuid": "96315f8e-3d56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lastpa-ge2.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776757818, "uuid": "bded844e-3d56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.92.154.218:40629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776758052, "uuid": "494c3550-3d57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.184.122:49912/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776758111, "uuid": "6c537a35-3d57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thin-pen3.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776758467, "uuid": "40ac363e-3d58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://redma-rk4.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776758827, "uuid": "1758056d-3d59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hardbox5.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776759131, "uuid": "cc13da85-3d59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.7.51:49444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776759131, "uuid": "cc1ad79f-3d59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-ba-g6.sylom5er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776759252, "uuid": "145f2e38-3d5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.234:37178/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776759427, "uuid": "7c886af1-3d5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.13.9:40062/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776759487, "uuid": "a0d197da-3d5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deepsea1.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776759491, "uuid": "a2d58587-3d5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.45.223:51635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776759790, "uuid": "550a7c43-3d5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-sky2.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776760094, "uuid": "0a33a8e3-3d5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-hi-ll3.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776760149, "uuid": "2b2d3b3a-3d5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.116.234:37178/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776760330, "uuid": "96eeee17-3d5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.162:52499/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776760398, "uuid": "bfcb0653-3d5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.87.176:43444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776760450, "uuid": "deb58aef-3d5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://darkwood4.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776760747, "uuid": "8f4b3c1a-3d5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-sun5.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776760878, "uuid": "ddec9aa9-3d5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.45.223:51635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776761111, "uuid": "68535608-3d5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-fi-sh6.to6vamil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776761412, "uuid": "1c383d35-3d5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-base1.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776761527, "uuid": "609436f3-3d5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.48.123.149:58125/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776761589, "uuid": "859bdabb-3d5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.202.74:59180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776761770, "uuid": "f112d4e8-3d5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cityli-fe2.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776761828, "uuid": "140b7670-3d60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.26.100.232:52211/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776762020, "uuid": "860b0a56-3d60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.87.176:43444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776762068, "uuid": "a2f5d6cb-3d60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nextdoor3.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776762427, "uuid": "78c89f58-3d61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.219.68:46771/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776762488, "uuid": "9d756aab-3d61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://full-ro-om4.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776762621, "uuid": "ec448dd0-3d61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.125.194:47135/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776762729, "uuid": "2d1c7d5c-3d62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://backyard5.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776762921, "uuid": "9f815ece-3d62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.44.159:56609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776763153, "uuid": "29b764b2-3d63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://side-vi-ew6.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776763410, "uuid": "c318223b-3d63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.2:54875/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776763454, "uuid": "dd529b4e-3d63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://goodnews1.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776763515, "uuid": "01392f81-3d64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.83.99:42786/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776763697, "uuid": "6df9e336-3d64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.202.74:59180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776763748, "uuid": "8c35f79f-3d64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-time2.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776763927, "uuid": "f6e91126-3d64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.158.55:33054/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776764110, "uuid": "63d2a76f-3d65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://realfa-ct3.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776764471, "uuid": "3b42d352-3d66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://niceshot4.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776764654, "uuid": "a86b2581-3d66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.80:52804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776764656, "uuid": "a94908db-3d66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.232.142.200:55377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776764710, "uuid": "c9f7ddb4-3d66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://just-ta-lk5.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776764777, "uuid": "f1cab116-3d66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.86.2:54875/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776764900, "uuid": "3ae5d904-3d67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.83.99:42786/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776765010, "uuid": "7c42bcad-3d67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easytask6.wi3sorim.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776765078, "uuid": "a4d9443f-3d67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.158.134:37678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776765429, "uuid": "76375214-3d68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-pie1.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776765438, "uuid": "7baae83c-3d68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.126.80:52804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776765500, "uuid": "a0d3eb70-3d68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:39637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776765728, "uuid": "284e5fc4-3d69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.226.64.138:36739/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776765975, "uuid": "bba54cad-3d69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-bun2.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776766152, "uuid": "257022a0-3d6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.169.66.166:46337/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776766152, "uuid": "25756381-3d6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-so-up3.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776766391, "uuid": "b3d22450-3d6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshtea4.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776766397, "uuid": "b7571e41-3d6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.183:52065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776766695, "uuid": "688e2761-3d6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.28.183:52065/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776766747, "uuid": "879f2d93-3d6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-mi-lk5.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776766761, "uuid": "901041ab-3d6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.204.252:51249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776766761, "uuid": "902111a2-3d6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.158.134:37678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776767002, "uuid": "1fadccbe-3d6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.224.118:56055/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776767049, "uuid": "3baa54a1-3d6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://purewater6.po7vaten.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776767056, "uuid": "4000ca3e-3d6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.232.142.200:55377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776767467, "uuid": "3527d69a-3d6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blackhat1.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776767710, "uuid": "c59ffa6a-3d6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-shi-rt2.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776767773, "uuid": "eb843b9e-3d6d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.204.252:51249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776768075, "uuid": "9f734906-3d6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://longbelt3.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776768326, "uuid": "34d5ac50-3d6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.179.150.127:46789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776768434, "uuid": "759a6f24-3d6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-co-at4.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776768674, "uuid": "04474ce2-3d70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://newstyle5.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769093, "uuid": "fdf05204-3d70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-lo-ok6.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769161, "uuid": "26f2f061-3d71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.132:53220/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769328, "uuid": "8a0075f7-3d71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.223.124:58281/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769387, "uuid": "ad98a00f-3d71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunny-day1.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769701, "uuid": "6858fb89-3d72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.2.207:57615/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769704, "uuid": "6a68e7c5-3d72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://156.229.118.140:47229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769754, "uuid": "880f4928-3d72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rainy-ni-ght2.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769934, "uuid": "f33e127e-3d72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.233.236.96:60693/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769958, "uuid": "01fb69d1-3d73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.241.223.215:51496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776769999, "uuid": "1a4b253f-3d73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.179.150.127:46789/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770053, "uuid": "3a231c7d-3d73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clearsky3.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770123, "uuid": "642a951a-3d73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.144.218:53483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770170, "uuid": "7fe12543-3d73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.249.174:41341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770411, "uuid": "0fec6a19-3d74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-sn-ow4.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770827, "uuid": "076f6418-3d75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.231.230:33928/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776770951, "uuid": "519eed68-3d75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmfire5.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776771024, "uuid": "7d54c25d-3d75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.188.55:54395/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776771131, "uuid": "bcb39dd8-3d75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-mo-on6.qi9maren.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776771430, "uuid": "6f42b412-3d76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavyload1.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776771441, "uuid": "75d0228e-3d76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.47.190.189:45324/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776771731, "uuid": "2286e854-3d77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-pa-ck2.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776771860, "uuid": "6f50e829-3d77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.128.104:54546/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776771924, "uuid": "95ab73b9-3d77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.128.104:54546/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776772034, "uuid": "d6f9d5c3-3d77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fullbox3.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776772041, "uuid": "db20a007-3d77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.144.218:53483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776772334, "uuid": "8a0a75b0-3d78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://empty-sp-ac4.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776772628, "uuid": "3934f122-3d79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://199.16.59.198:47006/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776772753, "uuid": "83ed1dd3-3d79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickmove5.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776772926, "uuid": "eafca962-3d79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.78.121:58404/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776772926, "uuid": "eb046add-3d79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.47.190.189:45324/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776773048, "uuid": "33a06d54-3d7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-po-int6.ra5xorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776773176, "uuid": "7fc82c8d-3d7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.200.212:53206/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776773417, "uuid": "0f8daef4-3d7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cvw05my.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776773602, "uuid": "7d89eb3e-3d7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.45.161:38562/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776773714, "uuid": "c0716f41-3d7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ik63uk.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776773721, "uuid": "c4b195f0-3d7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.146.71:54496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776774009, "uuid": "70890955-3d7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-forge.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776774070, "uuid": "94945b4f-3d7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.187.101.203:37039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776774368, "uuid": "4617de56-3d7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumlinea.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776774502, "uuid": "96759c74-3d7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.188.55:54395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776774551, "uuid": "b321eb38-3d7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.200.212:53206/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776774671, "uuid": "fb165ba3-3d7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyn-lineor.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776774728, "uuid": "1cf0b890-3d7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.225.225:52857/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776774859, "uuid": "6b2ae5f4-3d7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.79.163:55671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776775027, "uuid": "cf6517f7-3d7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://formatsol.7zoralix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776775039, "uuid": "d676d4bf-3d7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.66.222:36849/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776775327, "uuid": "82038084-3d7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easmb.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776775691, "uuid": "5ac5015a-3d80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://shal0-mount.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776775759, "uuid": "83382e28-3d80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.214.49:54653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776775926, "uuid": "e6f2c69c-3d80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.225.225:52857/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776775940, "uuid": "ef35af91-3d80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.115.92:55312/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776775940, "uuid": "ef4dfcc5-3d80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.205.74:38506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776775988, "uuid": "0ba27ae5-3d81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://uoovxa.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776776237, "uuid": "a072603c-3d81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.79.163:55671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776776348, "uuid": "e2a96fab-3d81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://equscript.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776776720, "uuid": "bffaad5b-3d82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.75.204:58633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776776912, "uuid": "32bf7413-3d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.215.157:37392/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776776947, "uuid": "47cad99b-3d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://validatorgus.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777069, "uuid": "8ffbc489-3d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qkxqry9b.ra2xemil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777083, "uuid": "988f2074-3d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.66.222:36849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777083, "uuid": "98956d36-3d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.11.206:35702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777127, "uuid": "b2b1be49-3d83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.78.146:55467/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777314, "uuid": "2252258d-3d84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sup64h.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777380, "uuid": "49c73507-3d84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.115.92:55312/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777670, "uuid": "f672db1f-3d84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.205.74:38506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777730, "uuid": "1a471ee2-3d85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://querprair.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777862, "uuid": "68e324d9-3d85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.16.83:59383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776777967, "uuid": "a7a2839b-3d85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qilzefl.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776778159, "uuid": "19bd8cc1-3d86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.75.204:58633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776778160, "uuid": "1a3b4405-3d86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.221.23:44606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776778223, "uuid": "3feeaa92-3d86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.37.81.174:53095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776778269, "uuid": "5b340991-3d86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eihf.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776778568, "uuid": "0dde956b-3d87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.16.83:59383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776778628, "uuid": "31610dd7-3d87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://repa1-zone.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776778820, "uuid": "a408acc6-3d87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.123.238:54132/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776778988, "uuid": "07cc2977-3d88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norspireum6.sylov9er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776779116, "uuid": "5484430d-3d88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.177.34:57500/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776779299, "uuid": "c14ee918-3d88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.177.34:57500/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776779531, "uuid": "4b9523b2-3d89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyperpul.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776779717, "uuid": "ba76ec60-3d89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://63teisp.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776779892, "uuid": "22d9b132-3d8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.225.44.209:46688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776779957, "uuid": "499a3238-3d8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talmeshis7.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776780134, "uuid": "b3442eda-3d8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ob1phqqu.degassing-mould.digital/?ublib=nkOrZQkryPJMIdhV", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776780310, "uuid": "1bcabd97-3d8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://st3r-dock.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776780610, "uuid": "cf0efdc2-3d8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorfluxor1.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776780727, "uuid": "1461b824-3d8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://201.149.107.50:58594/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776780794, "uuid": "3c87e60e-3d8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.37.81.174:53095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776780973, "uuid": "a70c386c-3d8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.12.27:57114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776781282, "uuid": "5f5336db-3d8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.163.91.246:60240/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776781329, "uuid": "7b7b302d-3d8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumvenex2.to4ramel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776781521, "uuid": "edd77fbb-3d8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.225.44.209:46688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776781570, "uuid": "0b47fc2b-3d8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eqov17u.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776781808, "uuid": "99192eeb-3d8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://node-ult.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776782117, "uuid": "50c94771-3d8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://stabiliz-watch.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776782467, "uuid": "21c16194-3d90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zmxbt7t.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776782591, "uuid": "6b7691c8-3d90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.138.147:36311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776782719, "uuid": "b7f6e428-3d90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.92.18:58913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776782771, "uuid": "d70143df-3d90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://w2poohjf.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776783070, "uuid": "891d8788-3d91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1yqev.kymli6rex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776783487, "uuid": "81be58d9-3d92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://moderntransit.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776783622, "uuid": "d209814a-3d92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.228.238:49290/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776783793, "uuid": "37c106b2-3d93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://777am.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776783921, "uuid": "8435517a-3d93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.173:39637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776784089, "uuid": "e85b5d5e-3d93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pyjq05.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776784327, "uuid": "76322809-3d94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.150:34420/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776784329, "uuid": "77414e51-3d94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.122.172:59648/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776784450, "uuid": "bf5f8092-3d94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fier-cany.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776784580, "uuid": "0ce49ad7-3d95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.92.18:58913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776784750, "uuid": "72961ed6-3d95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://uxld.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776784809, "uuid": "95e288f6-3d95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.228.238:49290/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785006, "uuid": "0ae81d5d-3d96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.72.197:58514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785050, "uuid": "258efb91-3d96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0udhnpx.po8vaxen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785058, "uuid": "29fbbf42-3d96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.177.139:49503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785120, "uuid": "4eb841f3-3d96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.213.221:46307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785227, "uuid": "8e972e8f-3d96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.8.150:34420/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785469, "uuid": "1efebacd-3d97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fgeyw.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785479, "uuid": "2531aac3-3d97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.46.75:56619/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785527, "uuid": "41cdd011-3d97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:34451/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785770, "uuid": "d278fb0e-3d97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rebate-spe.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785830, "uuid": "f67d8ce6-3d97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/grabb.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "rustystealer", "colour": "#1A044D", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776785889, "uuid": "194a5653-3d98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/grab.exe", "Tag": [ { "name": "DeepLoad", "colour": "#78e8ae", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776786127, "uuid": "a77bf4c7-3d98-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://granitcuriou.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776786285, "uuid": "05836e6e-3d99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:49180/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776786435, "uuid": "5ec19470-3d99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1ich-track.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776786499, "uuid": "84d8f0a2-3d99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.240.29:53152/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776786559, "uuid": "a8f3a402-3d99-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.177.139:49503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776786729, "uuid": "0e13d932-3d9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://work-gran.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776786919, "uuid": "7f03441d-3d9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.46.75:56619/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776787088, "uuid": "e3fcaf03-3d9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tqeibj.wi3sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776787277, "uuid": "547823df-3d9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.236:42069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776787402, "uuid": "9f2bd302-3d9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.216.49.131:38369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776787447, "uuid": "b9fb6f78-3d9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qjhle.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776787810, "uuid": "9251c5db-3d9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://974xwaj.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776787989, "uuid": "fcc2b716-3d9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://erzurumyoresel.com/erzurumyoresel.zip", "Tag": [ { "name": "PureHVNC", "colour": "#073DEF", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776788111, "uuid": "45d15429-3d9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://extendvia.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776788411, "uuid": "f85e3cbe-3d9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vel-markal.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776788769, "uuid": "ce105bcf-3d9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://crat-mark.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776788893, "uuid": "17aea360-3d9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.169.104.199:40537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776789071, "uuid": "8224b02b-3d9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.97.127:55464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776789073, "uuid": "836a0f88-3d9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool5-chain.de5xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776789074, "uuid": "83938590-3d9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.216.49.131:38369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776789427, "uuid": "5655b2d4-3da0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.111.110:34451/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776789492, "uuid": "7ca38a0c-3da0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelmarkis.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776789734, "uuid": "0ce287d4-3da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kelven9et.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776789859, "uuid": "5780a2cd-3da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.240.29:53152/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776790041, "uuid": "c469c2c4-3da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.75.236:42069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776790095, "uuid": "e46e08bc-3da1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pr1rne-plate.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776790396, "uuid": "97af7b14-3da2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-lithet.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776790397, "uuid": "9810cd3d-3da2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.51.242:34880/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776790464, "uuid": "c040351b-3da2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.51.242:34880/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776790752, "uuid": "6bfbeadb-3da3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyntide0al.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776791117, "uuid": "4563ebd1-3da4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://retanetwo.bovla1xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776791244, "uuid": "913f5b52-3da4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:40543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776791544, "uuid": "43fd57cf-3da5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-p4tt.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776791770, "uuid": "cabb9307-3da5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oifwmo.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776791827, "uuid": "ecb5d1f9-3da5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.207.154:50721/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792080, "uuid": "83a4cb77-3da6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0jw813sl.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792258, "uuid": "ed91896a-3da6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.140.248.242:4022/.i", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792376, "uuid": "341f0019-3da7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ggtqa.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792562, "uuid": "a3076ccd-3da7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.158.203:42849/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792730, "uuid": "06d3a4e2-3da8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.148.223.0:51569/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792734, "uuid": "097bc401-3da8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://colorcast.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792920, "uuid": "78735085-3da8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.177.80:55819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776792921, "uuid": "78c87802-3da8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.255.251.91:40543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776793329, "uuid": "6c30095d-3da9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-5ort.qi7mavel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776793511, "uuid": "d869ac55-3da9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sh4d-logic.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776793627, "uuid": "1d7488d2-3daa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.207.154:50721/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776793691, "uuid": "43d4c5ab-3daa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorvale0os.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776793757, "uuid": "6b4eccc4-3daa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.197.131:53404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794172, "uuid": "627c70f9-3dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.177.80:55819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794228, "uuid": "83a8dae6-3dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.148.223.0:51569/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794352, "uuid": "cda9b2fd-3dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://silverspecimen.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794361, "uuid": "d33ff052-3dab-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.85.221:51076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794532, "uuid": "390b6c97-3dac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wagcrate.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776794715, "uuid": "a5cea647-3dac-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-illurn.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776795073, "uuid": "7b8a2223-3dad-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://talline5ix.dis1iketerrit.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776795371, "uuid": "2cdd0ee7-3dae-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xvy42z.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776795729, "uuid": "024d5ec8-3daf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pack3-frame.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776795918, "uuid": "731e9071-3daf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.224.62:52644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776796027, "uuid": "b452245c-3daf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.247.249:49641/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776796089, "uuid": "d8eab26d-3daf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://profitconvo.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776796159, "uuid": "02d59dcb-3db0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.172.96:56776/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776796333, "uuid": "6a728316-3db0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sol-spireix.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776796749, "uuid": "6237b497-3db1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ujv18y.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776796869, "uuid": "a9dd38d3-3db1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://31.148.198.246:50475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776797118, "uuid": "3e96ffdc-3db2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.2.62:46373/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776797288, "uuid": "a399a5af-3db2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nr76.mess-laboratory.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776797528, "uuid": "32cbb52d-3db3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://split-mesh.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776797707, "uuid": "9dab117f-3db3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://v3lvet-core.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776797840, "uuid": "ecf7ace2-3db3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.224.62:52644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798067, "uuid": "744c7492-3db4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://guidelocal.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798069, "uuid": "751c4765-3db4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/ZXgR0l8.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798070, "uuid": "759c7e27-3db4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/ndZKSNL.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798070, "uuid": "75bb4d3b-3db4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.200/public_files/wb9HW4Y.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798073, "uuid": "77b42c5e-3db4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.172.96:56776/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798126, "uuid": "96f0d707-3db4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.13.9:40062/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798375, "uuid": "2b532994-3db5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-c4pita.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776798970, "uuid": "8e18a29c-3db6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://winttra.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776799048, "uuid": "bc724efe-3db6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.2.62:46373/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776799147, "uuid": "f7f3b11c-3db6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://notiflame.matri2rchyor.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776799391, "uuid": "89679612-3db7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://channe1-hold.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776799518, "uuid": "d52a2883-3db7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.87.130:56328/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776799639, "uuid": "1cda8255-3db8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.140.213:38141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776799749, "uuid": "5e8faa44-3db8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hblrl.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776799873, "uuid": "a8339721-3db8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.23.23:59988/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776799993, "uuid": "f0176705-3db8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p9hda.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776800656, "uuid": "7aea7ca2-3dba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://655f.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776800830, "uuid": "e2f09e83-3dba-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://narcore.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776800896, "uuid": "0a015e45-3dbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.89.103:42514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776801009, "uuid": "4dc7629f-3dbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyncoreis3.pepper-reprint.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776801250, "uuid": "dd863339-3dbb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.206.56:43941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776801319, "uuid": "06779966-3dbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.216.214:41123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776801371, "uuid": "2573a67c-3dbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5he1l-sheet.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776801428, "uuid": "473c41c1-3dbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.87.38:41895/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776801670, "uuid": "d7c4718e-3dbc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0n6rt.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776801920, "uuid": "6ca70d25-3dbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.196.117:59183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802028, "uuid": "acebdc45-3dbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.87.38:41895/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802028, "uuid": "aced727f-3dbd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xeeeto.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802220, "uuid": "1f2b9146-3dbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.226.192:44834/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802270, "uuid": "3d3d9f6f-3dbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.226.192:44834/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802337, "uuid": "654abcfc-3dbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802388, "uuid": "83558cd7-3dbe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rural-drive.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802690, "uuid": "37857eae-3dbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dawn-route.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802752, "uuid": "5c689d58-3dbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.88.166:56735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776802937, "uuid": "caf02621-3dbf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.89.103:42514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776803051, "uuid": "0e8e44b7-3dc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://delihyp.ant5pender.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776803056, "uuid": "11d7b97a-3dc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.68.250.0:34226/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776803348, "uuid": "bf74376d-3dc0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://decode-fac.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776803711, "uuid": "9820ea1b-3dc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1aqmr.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776803827, "uuid": "dd3ab6ee-3dc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.11.206:35702/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776803828, "uuid": "ddb59bde-3dc1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.89.14:34217/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776804068, "uuid": "6ca3ac15-3dc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6347.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776804310, "uuid": "fce69e18-3dc2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m46v.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776804611, "uuid": "b09bbd6b-3dc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.196.117:59183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776804669, "uuid": "d31a31fb-3dc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4mbe-wave.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776804744, "uuid": "ffa14d89-3dc3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.134.198:40571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805029, "uuid": "a9e2f6b8-3dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-c4rri.junkie-talker.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805158, "uuid": "f67aee46-3dc4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.230.148.181:40652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805276, "uuid": "3d2a0591-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.68.250.0:34226/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805327, "uuid": "5b1ff659-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.134.47:49044/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805339, "uuid": "62aeb7f7-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.98.69.33:56800/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805389, "uuid": "806d6a7a-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://splitorche.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "ab4078ae-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "ab690d05-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805461, "uuid": "ab6f9285-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "ab802721-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "ab81e4a1-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "ab84913d-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "abd006f7-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "abd00930-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "abd01dad-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "abd49f45-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805462, "uuid": "abdd52a3-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805519, "uuid": "cd7782b7-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805577, "uuid": "f01939a3-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805577, "uuid": "f019b408-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.49/hiddenbin/Space.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805629, "uuid": "0f05e9ee-3dc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.94.31.121:52659/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805629, "uuid": "0f145991-3dc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://grow9-craft.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776805687, "uuid": "321fe698-3dc6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.89.14:34217/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806051, "uuid": "0b02f6b2-3dc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tofk4.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806347, "uuid": "bb7ead48-3dc7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://d4rk-panel.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806472, "uuid": "05cadc7c-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://204.76.203.196/sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806709, "uuid": "93481e7d-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://204.76.203.196/aarch64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806710, "uuid": "935dfb8a-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://204.76.203.196/arm7", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806710, "uuid": "937296bb-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://z7wb.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806719, "uuid": "992f013b-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://204.76.203.196/i686", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806719, "uuid": "9942d42f-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://204.76.203.196/x86_64", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806779, "uuid": "bca3bee5-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://204.76.203.196/clean", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806896, "uuid": "02c6600b-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/ARMV7L", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806896, "uuid": "02c857a3-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/Ciabins.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "2326794a-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/I586", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "232679de-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/MIPS", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "23269c94-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/POWERPC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806951, "uuid": "232fef0e-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/M68K", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806952, "uuid": "24133118-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/SPARC", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806952, "uuid": "241334e6-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/SH4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776806952, "uuid": "2417f2ae-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/MIPSEL", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807011, "uuid": "46f0aa9c-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zty3nf.autovete7an.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807015, "uuid": "492c064a-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/ARMV5L", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807015, "uuid": "492c0a42-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/ARMV6L", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807015, "uuid": "492ea7d6-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/I686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807015, "uuid": "492eb352-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/X86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807015, "uuid": "492fdf1c-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/ARMV4L", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807126, "uuid": "8b69590a-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.134.47:49044/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807369, "uuid": "1c977d99-3dca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://closedsun.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807667, "uuid": "ce50d464-3dca-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumcrest0is.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "184f5c23-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "185e9de9-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "1868bfcd-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "1868d6fe-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "186b530a-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "186cd6d9-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807792, "uuid": "1875e762-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807800, "uuid": "1d4015f9-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807864, "uuid": "436880c1-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.riscv64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807865, "uuid": "445eb15b-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807866, "uuid": "446068f2-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.s390x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807866, "uuid": "44616fec-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807866, "uuid": "4471752d-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807866, "uuid": "44cb6d10-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/bot.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807870, "uuid": "4735c093-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807870, "uuid": "47383e8f-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807870, "uuid": "4748f946-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "477857e2-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "47857a07-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "47991759-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "47a0276d-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "47a6215c-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "47b71d78-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "47b72e26-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "47df2e33-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807871, "uuid": "47e6bb4b-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807917, "uuid": "62e8268b-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807935, "uuid": "6db3112b-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807935, "uuid": "6ddef8fc-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "6f0e1d25-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "6f0fa1e0-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.riscv64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "6f17a782-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "6f318fb4-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807937, "uuid": "6f350cb1-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6f6681d9-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6f668e51-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.s390x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6f66997b-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.riscv64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6f66b400-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.riscv64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6f673779-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.s390x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6f7a2ba3-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2stream.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6f7fb1cb-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.s390x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6f801401-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h2rapidreset.mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6f8c50fb-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6fb84cd0-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807938, "uuid": "6fdcd6bf-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.8/h3flood.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807966, "uuid": "80635a95-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkmark8um.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776807975, "uuid": "85866888-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.238.130:56243/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776808098, "uuid": "cea95e81-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.138.4.108:55673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776808329, "uuid": "588a03ba-3dcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fabr2-path.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776808396, "uuid": "809e6c2f-3dcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.121.199.3:31642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776808509, "uuid": "c3e8ae73-3dcc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:49180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776808626, "uuid": "09a46f79-3dcd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qjdc65n.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809050, "uuid": "0636dd75-3dce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t1ny-branch.over-resweat.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809226, "uuid": "6f1b9850-3dce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.156.128:40022/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809228, "uuid": "7050efd4-3dce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.241.141:38844/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809231, "uuid": "722bdcc4-3dce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.143.121:42796/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809287, "uuid": "93cb8c08-3dce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://luna-nod.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809415, "uuid": "e0282298-3dce-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.226.20:52483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809590, "uuid": "48139b85-3dcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:49440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809590, "uuid": "4819cddb-3dcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.138.4.108:55673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809711, "uuid": "903d96b7-3dcf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ymqzqwf.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776809948, "uuid": "1da24901-3dd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://383aosc.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810309, "uuid": "f486f609-3dd0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rzeusijc.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810609, "uuid": "a7e2cc9b-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://openshi.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "ae4b2229-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "ae4e99d5-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "ae51533b-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "ae5180c4-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "ae522cae-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "ae586abf-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "ae611c7d-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810620, "uuid": "ae6565c0-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810625, "uuid": "b103d2c7-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810625, "uuid": "b12b63cf-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810728, "uuid": "eec0de5c-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.156.128:40022/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810738, "uuid": "f4c66f8a-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.198.139:47367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776810971, "uuid": "7f724a5a-3dd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wwyik.dependint7amur.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811027, "uuid": "a09671f8-3dd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.12.200:34922/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811153, "uuid": "eb9e269a-3dd2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.18:49440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811387, "uuid": "7733d8ba-3dd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4mber2-flow.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811463, "uuid": "a45c0f2d-3dd3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.246.108:44380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811629, "uuid": "077307d4-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.114.29:55274/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811646, "uuid": "11f82191-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.185.152:37671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811693, "uuid": "2ddcc31c-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://7afu.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811762, "uuid": "56c30fca-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.85.185.152:37671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776811994, "uuid": "e1437149-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://handlerequi.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776812002, "uuid": "e6310c65-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.198.139:47367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776812242, "uuid": "75282f1e-3dd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.156.204:41334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776812293, "uuid": "93685047-3dd5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-draa.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776812652, "uuid": "69262e73-3dd6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-1llu.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776812953, "uuid": "1cfd4f2c-3dd7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0tt37-graph.mongol-replace.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776813427, "uuid": "3755c6b2-3dd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.114.29:55274/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776813552, "uuid": "820d1ad4-3dd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dfsgg.de8xapil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776813734, "uuid": "ee22dbb2-3dd8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ew6.kymle2rix.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776814032, "uuid": "a00a85c9-3dd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://home-tray1.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776814162, "uuid": "ed4aa702-3dd9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://204.76.203.196.ptr.pfcloud.network/sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776814326, "uuid": "4f6a4ed4-3dda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.77.12.200:34922/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776814335, "uuid": "54c249c0-3dda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glassb-otl2.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776814348, "uuid": "5c2c13ca-3dda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.152.81:48654/Mozi.m", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776814389, "uuid": "74ec673a-3dda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.246.108:44380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776814389, "uuid": "74f6fd7d-3dda-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.100.39:47840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776814634, "uuid": "06c8362d-3ddb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smalllamp3.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776815124, "uuid": "2a86945c-3ddc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.183.253:34642/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776815230, "uuid": "6a16e319-3ddc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-pa-per4.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776815410, "uuid": "d4fbee45-3ddc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://faststep5.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776815847, "uuid": "d9cf2137-3ddd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?AdobePSPremium", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776815892, "uuid": "f48f09fa-3ddd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cle-arbox6.mi5demeanwork.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776792075, "uuid": "8086d9e4-3da6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0jw813sl.qi7mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776801665, "uuid": "d47c2bae-3dbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0n6rt.ant5pender.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776812950, "uuid": "1b240cfc-3dd7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0tt37-graph.mongol-replace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785048, "uuid": "24143f9c-3d96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0udhnpx.po8vaxen.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776782706, "uuid": "b05e6f7d-3d90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.92.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776744307, "uuid": "484348ea-3d37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.219.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747485, "uuid": "aeea4261-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.136.46.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237a70e2-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.136.96.171", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8ef5cada-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.186.229.110", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747425, "uuid": "8ad6148a-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.88.210", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776768306, "uuid": "292fbca7-3d6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.179.150.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734884, "uuid": "5803dab0-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.249.251.152", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bc75808-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.109.219.21", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776737345, "uuid": "129a9709-3d27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.240.175.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776779885, "uuid": "1e9be74b-3d8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.225.44.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776765725, "uuid": "26ca1292-3d69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.226.64.138", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776809405, "uuid": "d9e3a873-3dce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.226.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776769925, "uuid": "ee47efe6-3d72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.233.236.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776760385, "uuid": "b7f431eb-3d5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.87.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734765, "uuid": "10df156d-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.53.138", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "2387fda5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.63.189", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776809224, "uuid": "6e3a9ebe-3dce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.228.241.141", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776742805, "uuid": "c98f1eed-3d33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.204.211.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776732725, "uuid": "50fab029-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.127.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810726, "uuid": "ed73a4c7-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.198.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776761585, "uuid": "82d1c0ab-3d5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.202.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776777846, "uuid": "5f864586-3d85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.16.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8ef5ed6d-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.153.249", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776792906, "uuid": "6fa4cb2b-3da8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.177.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734705, "uuid": "ed854a21-3d20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.232.160", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747606, "uuid": "f71a529d-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.40.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776756184, "uuid": "efdf56a3-3d52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.184.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785106, "uuid": "46ae2c6d-3d96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.213.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237e0a19-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.163.24", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776762906, "uuid": "96505343-3d62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.44.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734825, "uuid": "3508fe7d-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.12.165", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776759424, "uuid": "7b2e3b41-3d5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.13.9", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735064, "uuid": "c397299b-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.218.112", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734166, "uuid": "abf452e8-3d1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.127.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "238667dc-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.149.31.4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776749526, "uuid": "6f0f361f-3d43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.23.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736324, "uuid": "b29124c2-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.224.223", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776809224, "uuid": "6e3a8965-3dce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.143.121", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776814325, "uuid": "4e6cad15-3dda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.152.81", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "477cc987-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.113.53.214", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776754206, "uuid": "54aff8ad-3d4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.253.80.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8ef60f40-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.152.232.95", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "238932f8-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.162.161.96", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776732305, "uuid": "5715135d-3d1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.99.165.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776732725, "uuid": "50fa8b20-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.37.212.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736384, "uuid": "d61002d1-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.214.149", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776776885, "uuid": "22b400b4-3d83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.84.215.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "238967f2-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.191.25.150", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8ef853c5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.234.30.7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807964, "uuid": "7f24dba6-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.238.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776786485, "uuid": "7ce0072c-3d99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.240.29", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237a228b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.12.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736445, "uuid": "fa6370e5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.78.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785046, "uuid": "22ca6125-3d96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.177.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776778145, "uuid": "11db466a-3d86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.221.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776774725, "uuid": "1b5112c9-3d7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.225.225", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776732725, "uuid": "50fa9688-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.236.250", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8ef5803f-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.49.196", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776741606, "uuid": "fe90b939-3d30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.130.150.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bcea709-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.132.147.237", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776742925, "uuid": "10fd01f3-3d34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.123.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776763505, "uuid": "fb8e8afd-3d63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.83.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776792727, "uuid": "04ff5688-3da8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.148.223.0", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736384, "uuid": "d60e7e06-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.53.69", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734945, "uuid": "7c48a3f3-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.131.52", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776804725, "uuid": "f4b97be7-3dc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.134.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736325, "uuid": "b29eb75c-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.175.33", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776764645, "uuid": "a2b58990-3d66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.232.142.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776733144, "uuid": "4ada09bc-3d1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.197.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776765065, "uuid": "9d261a6d-3d67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.158.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bd578da-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.173.21", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776743885, "uuid": "4cca7a2b-3d36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.7.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776731225, "uuid": "d2dc865d-3d18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.23.27", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776803825, "uuid": "dbf2773d-3dc1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.89.14", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bd3acc3-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.129.110.112", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bd1c742-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.161.192.225", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776781265, "uuid": "552c0855-3d8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.163.91.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811624, "uuid": "04e30eec-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.114.29", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776739625, "uuid": "61b8719a-3d2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.83.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bc99b01-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.225.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736566, "uuid": "424c7fb6-3d25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.195.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735006, "uuid": "a095cb47-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.229.235", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776775924, "uuid": "e5fd34a1-3d80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.205.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237d047f-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.73.222", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734765, "uuid": "10e0469e-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "139.213.32.135", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8efc8219-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "151.42.171.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751986, "uuid": "298690d5-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.226.174.212", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8f031756-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "156.229.118.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776750308, "uuid": "41382fb3-3d45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.93.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776778205, "uuid": "358b67e1-3d86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.37.81.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237cb4f3-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.253.100", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776784986, "uuid": "ff0229fc-3d95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.72.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "478aca19-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.55.20", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "478a76bf-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.151.165.236", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237a6428-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.152.157.149", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734705, "uuid": "ed84794e-3d20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.164.98.99", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237c48e6-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.169.66.166", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735006, "uuid": "a0953b16-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.89.182", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734705, "uuid": "ed846512-3d20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.44.153.19", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8f0e873c-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.121.199.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751986, "uuid": "298f84e2-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.130", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776738965, "uuid": "d853b5ae-3d2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.141", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-32", "colour": "#1e2185", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806885, "uuid": "fc19a5ce-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.143", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807785, "uuid": "146476c1-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.8", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805445, "uuid": "a1c8b726-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.148.49", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776761825, "uuid": "121a3b48-3d60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "177.26.100.232", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736324, "uuid": "b298213a-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.69.227.89", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776769925, "uuid": "ee4824df-3d72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.241.223.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776769325, "uuid": "88853281-3d71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.223.124", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776745925, "uuid": "0d3562fe-3d3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.234.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776759485, "uuid": "9f536105-3d5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.45.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776729786, "uuid": "791324a5-3d15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.128.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776742565, "uuid": "3a5a529c-3d33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.158.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776779106, "uuid": "4e21fa9a-3d88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.177.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "477ca1b9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.52.112", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776769686, "uuid": "5f6af7f1-3d72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.2.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bcea518-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.28.30", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "477cafb9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.152.64", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "23879aa4-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.45.103", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730625, "uuid": "6d4d2a6d-3d17-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.23.135.246", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776803707, "uuid": "95fdd81f-3dc1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1aqmr.junkie-talker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776786432, "uuid": "5cd4540d-3d99-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1ich-track.wi3sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776783067, "uuid": "874e3247-3d91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1yqev.kymli6rex.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751986, "uuid": "2986b112-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2.26.84.151", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237c5891-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.96.32", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8f0653d3-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.110.28.203", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806465, "uuid": "01d66a8e-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "204.76.203.196", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776814151, "uuid": "e70606d6-3dd9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "204.76.203.196.ptr.pfcloud.network" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776802325, "uuid": "5db5d0ee-3dbe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "208.84.100.209", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776763386, "uuid": "b45e9919-3d63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.86.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776737225, "uuid": "cb6732fd-3d26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.26.37", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8f0efbd1-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.98.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237bf2ea-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.98.81", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776796144, "uuid": "fa0acf15-3daf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.172.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776755224, "uuid": "b3cbaec5-3d50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.207.105", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8f0be1c3-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.9.123", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237b1b07-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.91.16", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776731407, "uuid": "3f8a191b-3d19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.203.123.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776801906, "uuid": "63f7810e-3dbd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.127.196.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "23886293-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.94.32", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776799505, "uuid": "cd56e222-3db7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.87.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734705, "uuid": "ed854086-3d20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.34.169", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776799624, "uuid": "1422dc25-3db8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.140.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bd4a203-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.81.50", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776774846, "uuid": "63090601-3d7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.79.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734945, "uuid": "7c482a99-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "24.35.228.16", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "23892141-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.189.30.220", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734945, "uuid": "7c48668e-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.206.140.177", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "478b1fb2-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.229.129", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "238786ad-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.231.230", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776737106, "uuid": "8493d421-3d26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.216.120.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734825, "uuid": "3508b7da-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.218.57.214", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776745385, "uuid": "cadff6e6-3d39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.103.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776756307, "uuid": "38d2545a-3d53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.112.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734884, "uuid": "58043247-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.118.20", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736384, "uuid": "d60dfce5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.127.166", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8ef3d691-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.148.197.150", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776796863, "uuid": "a6a4c4c1-3db1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "31.148.198.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776809945, "uuid": "1bb79ecd-3dd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "383aosc.dependint7amur.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776771006, "uuid": "725e022c-3d75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.188.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811024, "uuid": "9f26455c-3dd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.77.12.200", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "238570b6-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.138.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8ef2f0e4-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.159.165", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776801425, "uuid": "45b9230c-3dbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.82.87.38", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734884, "uuid": "5803ea2e-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.14.83", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735064, "uuid": "c3973e6c-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.200.236", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794344, "uuid": "c918827a-3dab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.85.221", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735006, "uuid": "a09578f5-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.91.179", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776789066, "uuid": "7f13f83f-3d9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.97.127", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736024, "uuid": "ff69c56f-3d23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.206.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "478d2fa6-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.187.182", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776791825, "uuid": "eb48c26f-3da5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.207.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776801306, "uuid": "feb74259-3dbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.216.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785465, "uuid": "1c5ec1e1-3d97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.46.75", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776773165, "uuid": "79147741-3d7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.200.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "2378a5e7-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.70.109", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776800885, "uuid": "03b8e81e-3dbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.89.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776790385, "uuid": "916e9c88-3da2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.51.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776745925, "uuid": "0d35ac12-3d3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.148.170", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752886, "uuid": "41be597f-3d4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.92.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736445, "uuid": "fa636f69-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.237.48.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776771845, "uuid": "668aa2b6-3d77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.128.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811444, "uuid": "9959d111-3dd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.246.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8ef3a3ce-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.105.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776784325, "uuid": "752cea8a-3d94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.122.172", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776797106, "uuid": "36ee2bab-3db2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.2.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776742206, "uuid": "648753f3-3d32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.219.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736324, "uuid": "b2915345-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.40.220", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "478798e9-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.181.118", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776739024, "uuid": "fbc1d34e-3d2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.59.114.129", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735006, "uuid": "a09b0366-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.65.240", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811624, "uuid": "04e36e2b-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.85.185.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bca06dd-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.86.80.179", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751986, "uuid": "2986e995-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.135.194.4", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776737345, "uuid": "129a8f49-3d27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "49.70.124.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776804665, "uuid": "d0a58052-3dc3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4mbe-wave.junkie-talker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811385, "uuid": "75e40cc3-3dd3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4mber2-flow.mongol-replace.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736324, "uuid": "b2926c64-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.206.110.4", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "23788758-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.23.74.213", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734765, "uuid": "10e041bd-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.23.80.137", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734765, "uuid": "10e0205f-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.241.74.138", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8ef3637b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.173.54.131", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776771425, "uuid": "6c25ecd6-3d76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.47.190.189", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805325, "uuid": "5a0b1d39-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.98.69.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776801365, "uuid": "21d43fc5-3dbc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5he1l-sheet.ant5pender.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736084, "uuid": "237b3b5b-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.157.29", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "477d0f8e-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.232.210", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736324, "uuid": "b29c63c2-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.233.241", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bd41e43-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.163.158.31", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776787384, "uuid": "9492a5b8-3d9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.216.49.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776740944, "uuid": "74240ac5-3d2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.241.191.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776743165, "uuid": "9fbe9ea7-3d34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.27.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736265, "uuid": "8f0cc52d-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.32.161", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776787265, "uuid": "4db170f8-3d9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.75.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "478ce0b5-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.214.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736145, "uuid": "478be822-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.235.220", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bc9a8ab-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.71.169.3", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776804065, "uuid": "6ae5ef18-3dc2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6347.junkie-talker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776779706, "uuid": "b42a4460-3d89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "63teisp.to4ramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776800645, "uuid": "74715803-3dba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "655f.pepper-reprint.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736324, "uuid": "b2918d89-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "68.235.251.85", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776783785, "uuid": "336bf962-3d93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "777am.po8vaxen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811691, "uuid": "2c99dfea-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "7afu.mongol-replace.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776803046, "uuid": "0bb9b4e7-3dc0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.68.250.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736324, "uuid": "b290a971-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.69.13.106", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734765, "uuid": "10dfcae9-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.2.25.142", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776787806, "uuid": "8fb6f043-3d9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "974xwaj.de5xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776812650, "uuid": "680e421d-3dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-1llu.mongol-replace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776798368, "uuid": "2729403b-3db5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-c4pita.matri2rchyor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807964, "uuid": "7f2dd5ff-3dcb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkmark8um.over-resweat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752050, "uuid": "50072864-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "axodoyin.alwaysdata.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776742931, "uuid": "143bef35-3d34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "backy-ard5.guardiansti1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776762725, "uuid": "2a5c8491-3d62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "backyard5.kymle2rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776769091, "uuid": "fcb57a1a-3d70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-lo-ok6.de8xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776749290, "uuid": "e25db9bc-3d42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-lo-ok6.water-wagged.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776743885, "uuid": "4cd4d9c8-3d36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-ti-me2.bag-senior.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776763744, "uuid": "8a01b1af-3d64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-time2.wi3sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776756067, "uuid": "aa58d9e8-3d52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigjump3.ra1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736206, "uuid": "6bda4def-3d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigwall3.overfeed-social.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747491, "uuid": "b228194f-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "black-h-at1.water-wagged.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776767465, "uuid": "33e1dcf2-3d6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blackhat1.de8xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753487, "uuid": "a80738e0-3d4c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blu-etable1.9zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776759786, "uuid": "52e66fe5-3d5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-sky2.to6vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776739625, "uuid": "61c1bebb-3d2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-sk-y1.condit-rearrange.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776799327, "uuid": "62d07068-3db7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "channe1-hold.pepper-reprint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776741847, "uuid": "8e8915a7-3d31-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-wa-lk2.guardiansti1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776761764, "uuid": "edddecdf-3d5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cityli-fe2.kymle2rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776815890, "uuid": "f37b8c02-3ddd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cle-arbox6.mi5demeanwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735245, "uuid": "2f552853-3d22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cle-arbox6.wate7pugnac.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776750189, "uuid": "fabdb045-3d44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-sky3.championincomp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730266, "uuid": "978f5798-3d16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-sky3.sylo8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776770051, "uuid": "38f4acfa-3d73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clearsky3.qi9maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807366, "uuid": "1a68b63b-3dca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "closedsun.over-resweat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776750430, "uuid": "8a189889-3d45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-sn-ow4.championincomp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776770406, "uuid": "0cfb459c-3d74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-sn-ow4.qi9maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730625, "uuid": "6d5526ba-3d17-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldsn-ow4.sylo8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736865, "uuid": "f4cc00ad-3d25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldwa-ter5.overfeed-social.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776754746, "uuid": "96a0cf09-3d4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldwind5.9zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776792731, "uuid": "079b8522-3da8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "colorcast.qi7mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776766745, "uuid": "866652dc-3d6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-mi-lk5.po7vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776738844, "uuid": "90721176-3d2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-stone5.grabs5tatus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776789068, "uuid": "806529ab-3d9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool5-chain.de5xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776746890, "uuid": "4c053aa9-3d3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coolmi-lk5.deer5talagmite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776788766, "uuid": "cc6f2b61-3d9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "crat-mark.de5xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776773408, "uuid": "0a63eaf0-3d7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cvw05my.7zoralix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806345, "uuid": "ba3afe0a-3dc7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "d4rk-panel.autovete7an.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776739865, "uuid": "f0d5f338-3d2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-ni-ght2.condit-rearrange.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776760447, "uuid": "dcd44a62-3d5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "darkwood4.to6vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776802687, "uuid": "35c37dc6-3dbf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dawn-route.ant5pender.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776803345, "uuid": "bdd755a9-3dc0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "decode-fac.junkie-talker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776740229, "uuid": "c9f86721-3d2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-ocean3.condit-rearrange.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776759485, "uuid": "9f7e0a38-3d5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deepsea1.to6vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776803048, "uuid": "0cf661a4-3dc0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "delihyp.ant5pender.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776813550, "uuid": "806bbeba-3dd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dfsgg.de8xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776774668, "uuid": "f8f7d251-3d7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyn-lineor.7zoralix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776801006, "uuid": "4bbea441-3dbb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyncoreis3.pepper-reprint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776790750, "uuid": "6aa260a6-3da3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyntide0al.bovla1xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776775325, "uuid": "80c9c4b7-3d7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easmb.ra2xemil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776745208, "uuid": "61b22602-3d39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easy-ta-sk6.bag-senior.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776765006, "uuid": "7a43c661-3d67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easytask6.wi3sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776778266, "uuid": "5999ed12-3d86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eihf.sylov9er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752466, "uuid": "478a3da0-3d4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "empty-s-pac4.tarny-tsedilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776772330, "uuid": "877a79e8-3d78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "empty-sp-ac4.ra5xorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776732545, "uuid": "e5fb4729-3d1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "emptys-pace4.kymle6rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776781566, "uuid": "08bbcba3-3d8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eqov17u.kymli6rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776776345, "uuid": "e0a69223-3d81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "equscript.ra2xemil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776787986, "uuid": "fb1b1369-3d9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "erzurumyoresel.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776813731, "uuid": "ec617227-3dd8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ew6.kymle2rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776788109, "uuid": "444d0eb2-3d9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "extendvia.de5xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776808327, "uuid": "5727993e-3dcc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fabr2-path.over-resweat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776755465, "uuid": "436a8ff5-3d51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-run1.ra1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776815407, "uuid": "d3742231-3ddc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "faststep5.mi5demeanwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734945, "uuid": "7c55823b-3d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "faststep5.wate7pugnac.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785465, "uuid": "1c70bcbd-3d97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fgeyw.wi3sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776784447, "uuid": "bdd3035a-3d94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fier-cany.po8vaxen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776775025, "uuid": "cdeda8ac-3d7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "formatsol.7zoralix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776737525, "uuid": "7dff62ed-3d27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-app-l1.grabs5tatus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776746590, "uuid": "998d0840-3d3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-tea4.deer5talagmite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776766387, "uuid": "b10f9b48-3d6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshtea4.po7vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752165, "uuid": "9438d5c3-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "full-b-ox3.tarny-tsedilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776762485, "uuid": "9b5904b1-3d61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "full-ro-om4.kymle2rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776732184, "uuid": "0ed7d1be-3d1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fullbox3.kymle6rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776772028, "uuid": "d37afc0f-3d77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fullbox3.ra5xorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776742565, "uuid": "3a62e241-3d33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fullr-oom4.guardiansti1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794710, "uuid": "a357e97a-3dac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-illurn.dis1iketerrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776792370, "uuid": "308b01a7-3da7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ggtqa.qi7mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776814330, "uuid": "51ad55d6-3dda-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glassb-otl2.mi5demeanwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776733925, "uuid": "1c5a522e-3d1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glassb-otl2.wate7pugnac.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776761106, "uuid": "659346b3-3d5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-fi-sh6.to6vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776740525, "uuid": "7a2ef9b6-3d2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldfi-sh4.condit-rearrange.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776743525, "uuid": "767d8187-3d35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-n-ews1.bag-senior.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776763447, "uuid": "d8c9dbd1-3d63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goodnews1.wi3sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776786125, "uuid": "a62fc626-3d98-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "granitcuriou.wi3sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753786, "uuid": "5ab1f110-3d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenlamp2.9zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805626, "uuid": "0d700ba8-3dc6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "grow9-craft.autovete7an.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776798065, "uuid": "72fd73df-3db4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "guidelocal.matri2rchyor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776811990, "uuid": "ded1bd42-3dd4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "handlerequi.mongol-replace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776758825, "uuid": "162df65e-3d59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hardbox5.sylom5er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776799744, "uuid": "5bdc4640-3db8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hblrl.pepper-reprint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751569, "uuid": "3149fbb1-3d48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-lo-ad1.tarny-tsedilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776731525, "uuid": "86099df9-3d19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-load1.kymle6rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776771425, "uuid": "6c391e56-3d76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavyload1.ra5xorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776760088, "uuid": "06ab720e-3d5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-hi-ll3.to6vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776755106, "uuid": "6d87a5b5-3d50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "highstep6.9zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776761407, "uuid": "18b8f819-3d5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-base1.kymle2rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776814025, "uuid": "9bac0a19-3dd9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-tray1.mi5demeanwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776733564, "uuid": "457c4afd-3d1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "home-tray1.wate7pugnac.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776746345, "uuid": "077c7b7f-3d3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-s-oup3.deer5talagmite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776766146, "uuid": "21596a21-3d6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-so-up3.po7vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776738248, "uuid": "2d0cca76-3d29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hottea3.grabs5tatus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776779469, "uuid": "26b30f3a-3d89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyperpul.to4ramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776773711, "uuid": "be9a5bab-3d7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ik63uk.7zoralix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776764707, "uuid": "c80086b2-3d66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "just-ta-lk5.wi3sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776744847, "uuid": "8a30124c-3d38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "justta-lk5.bag-senior.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776789489, "uuid": "7b37d89d-3da0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelmarkis.bovla1xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776789731, "uuid": "0b4105a4-3da1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kelven9et.bovla1xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776757745, "uuid": "9261dd76-3d56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lastpa-ge2.sylom5er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751151, "uuid": "37c7f157-3d47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-mo-on6.championincomp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776771127, "uuid": "ba932888-3d75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-mo-on6.qi9maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776731283, "uuid": "f5de2b23-3d18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-moon6.sylo8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776771728, "uuid": "20760faa-3d77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-pa-ck2.ra5xorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776731885, "uuid": "5ca698b3-3d1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lightp-ack2.kymle6rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751811, "uuid": "c15a2d48-3d48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lightp-ack2.tarny-tsedilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776748211, "uuid": "5f88662c-3d40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-be-lt3.water-wagged.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776768071, "uuid": "9d252829-3d6e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "longbelt3.de8xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776756425, "uuid": "7f9f3749-3d53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "longro-ad4.ra1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807664, "uuid": "cc8119a3-3dca-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumcrest0is.over-resweat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776774365, "uuid": "447b60c5-3d7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumlinea.7zoralix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776781325, "uuid": "79097f2f-3d8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumvenex2.to4ramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776809285, "uuid": "92924c30-3dce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "luna-nod.dependint7amur.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776804307, "uuid": "fb1135bb-3dc2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m46v.junkie-talker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776773045, "uuid": "319d4a1d-3d7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-po-int6.ra5xorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776753126, "uuid": "d0fa52a9-3d4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-po-int6.tarny-tsedilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776733207, "uuid": "7034161c-3d1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-point6.kymle6rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776751987, "uuid": "29e645e2-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "markway.ru" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752050, "uuid": "4ffbe40b-3d49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "metotmimarlik.com.tr" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776783426, "uuid": "5d68c80a-3d92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "moderntransit.po8vaxen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776800825, "uuid": "e01113f8-3dba-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "narcore.pepper-reprint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805026, "uuid": "a7ccd802-3dc4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-c4rri.junkie-talker.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776736566, "uuid": "4256fbd2-3d25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-vi-ew4.overfeed-social.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776749112, "uuid": "787d7577-3d42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "newst-yle5.water-wagged.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776768670, "uuid": "01c2e58c-3d70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "newstyle5.de8xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776756724, "uuid": "31bd0acc-3d54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "newtrip5.ra1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776742207, "uuid": "648feebb-3d32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "next-door3.guardiansti1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776762065, "uuid": "a162fd0e-3d60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nextdoor3.kymle2rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776744484, "uuid": "b2411dd3-3d37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nice-sh-ot4.bag-senior.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776764466, "uuid": "38050ad3-3d66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "niceshot4.wi3sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776781805, "uuid": "97403bb4-3d8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "node-ult.kymli6rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776778985, "uuid": "06349a87-3d88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norspireum6.sylov9er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776799145, "uuid": "f654c0db-3db6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "notiflame.matri2rchyor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776797284, "uuid": "a15a19cc-3db2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nr76.mess-laboratory.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776780126, "uuid": "ae588a9a-3d8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ob1phqqu.degassing-mould.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776791768, "uuid": "c945d765-3da5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oifwmo.qi7mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776739205, "uuid": "679d05f8-3d2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "old-ca-se6.grabs5tatus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776757085, "uuid": "08eae35d-3d55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "old-town6.ra1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776815950, "uuid": "1736f2af-3dde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-wind1.aperitif-form.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735545, "uuid": "e1c2c96e-3d22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-wind1.overfeed-social.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776757444, "uuid": "dee263d4-3d55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "openbook1.sylom5er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810606, "uuid": "a6143f35-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "openshi.dependint7amur.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776799985, "uuid": "eaf26f45-3db8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p9hda.pepper-reprint.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776795727, "uuid": "0116cde8-3daf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pack3-frame.mess-laboratory.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776790092, "uuid": "e247f00c-3da1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pr1rne-plate.bovla1xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776796085, "uuid": "d6a50c08-3daf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "profitconvo.mess-laboratory.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747247, "uuid": "21391e12-3d3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "purewa-ter6.deer5talagmite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776767047, "uuid": "3a63e414-3d6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "purewater6.po7vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776784084, "uuid": "e57c2814-3d93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pyjq05.po8vaxen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776777965, "uuid": "a6065258-3d85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qilzefl.sylov9er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776808624, "uuid": "086b1960-3dcd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qjdc65n.over-resweat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776787445, "uuid": "b8ab4fac-3d9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qjhle.de5xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776777066, "uuid": "8e38d594-3d83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qkxqry9b.ra2xemil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776777725, "uuid": "17091dba-3d85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "querprair.sylov9er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776752770, "uuid": "fcf6384d-3d4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickmo-ve5.tarny-tsedilka.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776732964, "uuid": "df9b3b39-3d1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickmove5.kymle6rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776772747, "uuid": "7fd6fe7b-3d79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickmove5.ra5xorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776793687, "uuid": "415b72df-3daa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorvale0os.dis1iketerrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776749831, "uuid": "24e803fb-3d44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rainy-ni-ght2.championincomp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776769751, "uuid": "864abf54-3d72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rainy-ni-ght2.qi9maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776729907, "uuid": "c16fffc3-3d15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rainynight2.sylo8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776744244, "uuid": "234296fb-3d37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "real-fact3.bag-senior.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776764047, "uuid": "3e5c8e69-3d65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "realfa-ct3.wi3sorim.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776785766, "uuid": "cfe6115d-3d97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rebate-spe.wi3sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776737225, "uuid": "cb6fc438-3d26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "redbook6.overfeed-social.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776758465, "uuid": "3f67ae52-3d58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "redma-rk4.sylom5er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776778625, "uuid": "2f907fa3-3d87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "repa1-zone.sylov9er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776791112, "uuid": "4281d958-3da4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "retanetwo.bovla1xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776802384, "uuid": "815d9109-3dbe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rural-drive.ant5pender.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810306, "uuid": "f32aa53d-3dd0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rzeusijc.dependint7amur.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776774007, "uuid": "6f1b4a53-3d7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-forge.7zoralix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776793507, "uuid": "d61da09d-3da9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sh4d-logic.dis1iketerrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776775685, "uuid": "5710bd62-3d80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "shal0-mount.ra2xemil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776743169, "uuid": "a23a1a0f-3d34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "side-vi-ew6.guardiansti1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776763149, "uuid": "273530be-3d63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "side-vi-ew6.kymle2rix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776741425, "uuid": "92d06d25-3d30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "silver-ra-in6.condit-rearrange.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794350, "uuid": "cc5824c8-3dab-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "silverspecimen.dis1iketerrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776755765, "uuid": "f64f8113-3d51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "slowwa-lk2.ra1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776754145, "uuid": "306c9c79-3d4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-cup3.9zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776814631, "uuid": "04a2697f-3ddb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smalllamp3.mi5demeanwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734224, "uuid": "ce5cddf3-3d1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smalllamp3.wate7pugnac.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776759127, "uuid": "c9e6a7e9-3d59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-ba-g6.sylom5er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776735845, "uuid": "9489416d-3d23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-cha-ir2.overfeed-social.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776796331, "uuid": "68fb04b6-3db0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sol-spireix.mess-laboratory.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776797525, "uuid": "30f4e8de-3db3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "split-mesh.matri2rchyor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776805386, "uuid": "7e473cec-3dc5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "splitorche.autovete7an.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776780307, "uuid": "19f33ee5-3d8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "st3r-dock.to4ramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776782049, "uuid": "289bcb97-3d8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "stabiliz-watch.kymli6rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776791541, "uuid": "421180d3-3da5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-p4tt.qi7mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776749466, "uuid": "4b9e11be-3d43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunny-d-ay1.championincomp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776769385, "uuid": "ac4d0095-3d71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunny-day1.qi9maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776729608, "uuid": "0f759405-3d15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunnyd-ay1.sylo8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776777306, "uuid": "1db4015b-3d84-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sup64h.sylov9er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776745925, "uuid": "0d3ccd96-3d3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-bun2.deer5talagmite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776737885, "uuid": "54998df9-3d28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-bun2.grabs5tatus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776765967, "uuid": "b719b9d2-3d69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-bun2.po7vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776809045, "uuid": "03487609-3dce-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "t1ny-branch.over-resweat.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776790391, "uuid": "94b03e28-3da2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-lithet.bovla1xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776795069, "uuid": "792d84d9-3dad-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talline5ix.dis1iketerrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776779952, "uuid": "465fd9ed-3d8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "talmeshis7.to4ramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776745445, "uuid": "ef01829f-3d39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-pi-e1.deer5talagmite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776765425, "uuid": "73f2b22b-3d68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-pie1.po7vaten.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776758106, "uuid": "693e1173-3d57-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thin-pen3.sylom5er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806046, "uuid": "0829be00-3dc7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tofk4.autovete7an.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776741666, "uuid": "2263fb58-3d31-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-f-loor1.guardiansti1l.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776787085, "uuid": "e20b31d5-3d9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tqeibj.wi3sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776812290, "uuid": "91b61971-3dd5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-draa.mongol-replace.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776796744, "uuid": "5f7c48bc-3db1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ujv18y.mess-laboratory.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776793325, "uuid": "69d05b3e-3da9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-5ort.qi7mavel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776775985, "uuid": "0a3bcc08-3d81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "uoovxa.ra2xemil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776784748, "uuid": "710d94ea-3d95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "uxld.po8vaxen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776797705, "uuid": "9c609873-3db3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "v3lvet-core.matri2rchyor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776776945, "uuid": "4607fe53-3d83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "validatorgus.ra2xemil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776788407, "uuid": "f647b129-3d9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vel-markal.de5xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776780607, "uuid": "ccd3f809-3d8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorfluxor1.to4ramel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776782769, "uuid": "d5e62155-3d90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "w2poohjf.kymli6rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776794530, "uuid": "37af5bce-3dac-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wagcrate.dis1iketerrit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776768430, "uuid": "732e8248-3d6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-co-at4.de8xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776748511, "uuid": "1290e40c-3d41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-co-at4.water-wagged.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776738546, "uuid": "deac9c39-3d29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-m-ilk4.grabs5tatus.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776760744, "uuid": "8e0f610b-3d5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-sun5.to6vamil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776750845, "uuid": "81b7e23f-3d46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmf-ire5.championincomp.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776770947, "uuid": "4f4eefe3-3d75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmfire5.qi9maren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776730925, "uuid": "20766001-3d18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmfire5.sylo8ren.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776815227, "uuid": "681692bb-3ddc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-pa-per4.mi5demeanwork.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776734587, "uuid": "a6bac1d7-3d20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-pa-per4.wate7pugnac.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776767707, "uuid": "c3d7abc0-3d6d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-shi-rt2.de8xapil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776747785, "uuid": "617f30a6-3d3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-shir-t2.water-wagged.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776754507, "uuid": "08589375-3d4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-wa-ll4.9zoravel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776740825, "uuid": "2d368e21-3d2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "whitecl-oud5.condit-rearrange.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776798967, "uuid": "8c7d6808-3db6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "winttra.matri2rchyor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776786725, "uuid": "0b885666-3d9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "work-gran.wi3sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776810967, "uuid": "7d0cc6d1-3dd2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wwyik.dependint7amur.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776802025, "uuid": "ab55cdbe-3dbd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xeeeto.ant5pender.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776795364, "uuid": "291a2071-3dae-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xvy42z.mess-laboratory.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776809707, "uuid": "8dccf2ec-3dcf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ymqzqwf.dependint7amur.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776806706, "uuid": "9184f044-3dc8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "z7wb.autovete7an.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776782464, "uuid": "1fd456c3-3d90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zmxbt7t.kymli6rex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776807007, "uuid": "44d38b8d-3dc9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zty3nf.autovete7an.in.net" } ] } }