{ "Event": { "published": true, "date": "2026-04-22", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-04-22", "timestamp": 1776903327, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "b3125487-42ca-4155-8d9d-4fcd0fd8a5cd", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1776816077, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816077, "uuid": "d931fbb5-68f3-43bc-aa8f-2159425660a9", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816077, "uuid": "b3d080c0-3582-4005-b660-c1f0319e09e2", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816077, "uuid": "c5e32915-830b-4ebd-a7ef-b244f3e6f5e1", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816077, "uuid": "c9f325cb-d422-4d90-b5cc-71084dedda7c", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776816077, "uuid": "83f322d7-4f69-4aa4-8253-1211693636cb", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6725133c-3dde-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776816084, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816084, "uuid": "1991c6c0-4398-47c5-99e3-0cda1782dccc", "comment": "Malware payload", "value": "0c4d873f5985ddadadfe435ccf00549e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816084, "uuid": "07b047d9-2018-4a7b-8e5d-2a4b44cd7028", "comment": "Malware payload", "value": "7a700c6d942c9adfc1f9c7debce6ee647fe743aca9fe0271213008d8dbfd815d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816084, "uuid": "539d5af9-596f-4d60-b206-8ae542ae618c", "value": "T1918309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816084, "uuid": "58ff11c1-fa31-48c0-be76-0275c89f7c7a", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnfWaoVN/:XEKltp9txAX/yr2pbfWpVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776816084, "uuid": "1d20af28-1ef0-43f4-904e-751e070a6013", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816084, "uuid": "9703d046-c792-484b-9b2e-1e0ef8a0a70c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "247bdf0b-3dd3-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776816432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816432, "uuid": "011c55b9-325d-4203-95d4-d8afc9a7f6a0", "comment": "Malware payload (Mirai)", "value": "5ce0edb49d0dd71052fc332532956269", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816432, "uuid": "d3c88348-7bd1-4258-8bd8-d6930dd5d348", "comment": "Malware payload (Mirai)", "value": "89fc5cf1b3e6535db5ec0b251c2ae1b6c5acd45f63f1fa18178da1ec78185ab8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816432, "uuid": "2cc78c89-eadb-4f56-b05b-9f6c42125421", "value": "T18344A432995CC587C021617D60EECF7BDDBE73CA2A14CD067D912D385A95EEA3A07E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816432, "uuid": "973a11b1-f424-4cdc-8af9-5e5d96a19f38", "value": "6144:Ax/qvBi02k4OknpPh0dMIAQUdTG7HEVKf9mWwB3eA4:Ax/qpiNk4OknpRIAQUJcmWwB3eA4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776816432, "uuid": "5428a155-2517-483d-bdbc-ecb1297ccc20", "value": 277420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816432, "uuid": "6906036b-3b28-4980-9742-108a38d0657f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ffa4ee85-3dd8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776816657, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816657, "uuid": "2e21f54b-b9b9-4dcf-bf29-e241a343e195", "comment": "Malware payload (Gafgyt)", "value": "5dbef27e9ac3fe5be934095c41ffe006", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816657, "uuid": "ab191e2a-7686-48c0-b17d-7b50398f94c5", "comment": "Malware payload (Gafgyt)", "value": "5f3db8567269f88bdb43212a014644a90c4ac68a842f5d565a1c208890991cad", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816657, "uuid": "854b0c30-9452-4c4c-b450-f4895361588f", "value": "T1BF43F171C4630744E599927A189BBD03A410CF4C4521A3F881F53BA9E6B7FFC1B9CA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816657, "uuid": "c2617b03-d521-4b6c-b370-bb018842f0c9", "value": "1536:OAscKnkFF2yepSSiQ3LzoUcSAdD06uWwdbsicOqAtGt0RMQpenouy8bqG:icHT2y4SSiQ3LzkSAjuWwpUAtGGR/p+L", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776816657, "uuid": "cbce7564-a823-419c-8d54-f67e5b601516", "value": 60272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816657, "uuid": "f0f19ea8-ddcd-4cef-b58d-502c137ff4d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d860417d-3ddf-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776816704, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816704, "uuid": "4c608589-0374-4ad1-8070-ddbae5888ebe", "comment": "Malware payload", "value": "9e0024ff9de420b21905799a9cb1781b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816704, "uuid": "be1427c5-69bf-47eb-84c6-87e34b2f98e5", "comment": "Malware payload", "value": "0b5c8661e9e8f9dc217e9f8b9b3982047ff06accb1839dc4c88d79352af525b3", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816704, "uuid": "fba78fe2-e418-46c6-a86c-87e873ab0a6d", "value": "T132931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816704, "uuid": "a850ea3f-e76c-4ae2-87af-d379f8489400", "value": "1536:nByp1tF/uwMmAIa14oX/KIlepeV7tb73WdxCrCitkb5fv2v05xWjrIKQ/s1kKYrW:n8JIe0GitkbFv2v05xWjrs/s1kTrty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776816704, "uuid": "c2649270-bdef-4bd4-8287-1e25cf43aea8", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816704, "uuid": "ab2bf3f0-6041-4247-ad2c-0c0ec6347518", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3df9caf-3dd6-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776816784, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816784, "uuid": "5440abec-9716-43d2-a90b-7a3c6d84ba72", "comment": "Malware payload (Mirai)", "value": "887a9ec5f23945e27cc208e4463970aa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816784, "uuid": "0a042e1c-c6a4-4cd7-b50f-937e103fe32f", "comment": "Malware payload (Mirai)", "value": "fb5e014e529004624fedb8182a80bace4d451317bcf1f002f5f9dc7b41ecc730", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816784, "uuid": "99359450-63fd-4293-993c-af78ece7731f", "value": "T1D3142C71945CCA87C52222BCA4E9DF7A8F7E72DA2649CD317DD4603449CBE9B3906F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816784, "uuid": "90446695-59e1-4e9e-a271-cb8df4b62ec1", "value": "1536:LGZoshBY99ExNi9DNly65YE1h/HNB5RSIzRQmkKyVJLTlK+pK7DKrtwp+Vp+wEiK:8oshBY6bQfNBxzl4LTyU9M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776816784, "uuid": "aaa1a842-a86b-4e65-9a72-f054ad173830", "value": 202420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816784, "uuid": "0d5637f3-b366-47bc-8e37-b507b87dbb59", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776817281, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776817281, "uuid": "857d12f9-2bb1-4ed9-937f-5c0d6c24cf05", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776817281, "uuid": "0a4c8dc6-82eb-4c11-a4fc-397c308c6282", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776817281, "uuid": "6269b8cf-3f70-4d6a-ac7e-7b9803db2743", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776817281, "uuid": "d647457d-b819-4d44-8efc-2aab89c6b574", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776817281, "uuid": "287b8d4e-3de3-44fd-a283-c6a48b868258", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d88c9b03-3dda-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776819980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776819980, "uuid": "4ce8b3bb-50ac-4782-9fe5-fe9c51c2ca1f", "comment": "Malware payload", "value": "414003b3c5873bb8baff0295d7d3e28d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776819980, "uuid": "ab4a1873-b4cf-4629-8e5d-6265314e483b", "comment": "Malware payload", "value": "b9757d0f6331115a7bbca5621122fe878c77487f2242d98f75c68b6be317f938", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776819980, "uuid": "284b2873-2084-4f8b-8eac-db8a9b5e9152", "value": "T13D53F25FEA1298DEE54E697938EFEF206A5070A1318E67CC7706D410F62E452B7ED0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776819980, "uuid": "94df2f9e-f4ff-4a62-88e5-a3588b8d7663", "value": "1536:BRUvrox/n5RmqnTt04g9EAiywtx2koqkroPe1eP:BRUjoxP/FnpmEALwT2k8roB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776819980, "uuid": "47403d07-ce86-4aef-8061-decd9ea4f3a1", "value": 65936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776819980, "uuid": "36ee4786-df5e-4e9d-b45a-917d44ed72ad", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1776820459, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820459, "uuid": "f7a8670a-549e-41ed-be1a-c9a043fa8054", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820459, "uuid": "e685b4c4-8dc2-42f8-93a6-96e64644f325", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820459, "uuid": "04be5598-ea45-4f88-8a95-56604c39d592", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820459, "uuid": "9b1ca6a0-f160-4994-ba92-b7ccdc2fe01e", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820459, "uuid": "04b2b46b-a3fd-4d29-9b37-bd6f01a9264e", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be0ec2bc-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "6fd4a141-3711-47e7-aa8e-26b5da20f7c7", "comment": "Malware payload (Mirai)", "value": "c4163ca1eb0b6a39b7659dc9154705ad", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "640d9235-43ac-4396-a2fd-4c9c80056f37", "comment": "Malware payload (Mirai)", "value": "4f60cc8c698224ffed7001fb03744693ff4de6c1d1e90a8d44b9408636aa99b1", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "ca580768-4ccd-45f6-b3c7-7b4f4a8acd23", "value": "T17943C552BC815A2BC6E422BBEA6E518D3371B3F8D1DA3617CC111B64778941E0EA7B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "d932c68f-c07c-4019-80f3-6c619fa466dc", "value": "1536:0IZejd/oZ+SaVP8+ctncSlG9WtQf05bd42+n:0IZM+EYtceG9SQsDY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820525, "uuid": "64d915df-ad68-4621-a34a-19175fa8f3a5", "value": 55868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "692d7239-9135-4f54-b5d3-1495b93c5233", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be120de6-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "7fa45545-f9b1-4817-bf41-0eb20eba4cc5", "comment": "Malware payload (Mirai)", "value": "09cf7762037046759dee90ca2fc42df6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "979afd6d-6540-40fe-a54e-0250eeb3fbd3", "comment": "Malware payload (Mirai)", "value": "48eaf0d452acf3682dab0f151dd4ab95d6eeb6123378da2a9852e0f6e979393a", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "9a62a76d-fc40-40ce-b337-e156deb09779", "value": "T16553F54578819A13C5E423BBFA6E018D373563F8D1EA3216DD222F6477C982F0DA77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "00b2b75c-22bb-4ab1-8182-edd2477f8d10", "value": "1536:7PCSEuPYQsl9rsObO+Q0maKlG9WCHY2Jxed42+:7P9XKrssQ4mG9VH3Jxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820525, "uuid": "6f05835b-0d26-4f64-800c-c19e973ee14b", "value": 64716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "73965fc4-49ce-4001-b319-0392ae06e96a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be150a61-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "75993421-5852-49fc-979e-2267886a60db", "comment": "Malware payload (Mirai)", "value": "827f63e6e568f3b56d17ec69fd5bc99e", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "2a5bb713-873f-4609-8198-b60d7cb8d2fd", "comment": "Malware payload (Mirai)", "value": "e489502498829c8164587166d010472284b2d3b414752058a2ac8de82f0be599", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "6fa062dd-6375-4154-9c5f-5ea84d78825c", "value": "T118D34B46FA408A13C4D517BAFAAF01493332D7A4D3DB730699185FB43F867AE0E636", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "f044cfac-309f-4f40-ba61-0696ff25264c", "value": "3072:wSWIdMFUC+y8i4PzoxNOqMP0wctzHnRl+dw8M/9DYj:ZWIdeUC+y8i40xNOqMPVoj+dvM/9DYj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820525, "uuid": "119c76ee-ff62-45fc-bffb-baace5d61523", "value": 136786, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "b4fa40d8-6b8e-4827-b7bf-e4931b2490ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be176b2c-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "a40f27ff-c759-4c4e-9fc9-4a94ee44084f", "comment": "Malware payload (Mirai)", "value": "e8ca477587c1ae574729e2c3d25d2013", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "d812afd4-4e8b-442a-8bc5-e20798323aa2", "comment": "Malware payload (Mirai)", "value": "e314c8257f9acae2a4c2d85080df498cbc04c9493c393f311ea0f720ba868752", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "d4f204dd-66d0-4566-90de-1dca66809e0f", "value": "T1F7535A2579B63E07C0D5A07A25F38324B6A57A9E31B8C21D7D732E4EFF18650A4076", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "e2c81fc7-4405-486d-afef-8121c9269186", "value": "1536:5gGDBBMo2g4RA2OCibSXYZoBsC+WSzeWHhvpdYm+R:e5H81eXGoz+WMhU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820525, "uuid": "446cad0f-0230-483c-89f2-5841bd57ab5d", "value": 64592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820525, "uuid": "95cae9f1-eb43-4fda-99ab-20cc79a98923", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc1e994c-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820575, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820575, "uuid": "d57f7123-82de-407b-b41b-a121959b7a0e", "comment": "Malware payload (Mirai)", "value": "f38aeab75c3182a985a8fa74eabdc845", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820575, "uuid": "983cd481-e6d7-483f-a9a7-5ae7204fd0ae", "comment": "Malware payload (Mirai)", "value": "1d08419e6618429b0d375278d23531aa9a71f5358a96e768dde04c018a6a30f8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820575, "uuid": "f73656f7-3bb9-4ce3-9186-0cb8ab36d86f", "value": "T1F0533A97B801AD3CFD1BE6BE80124A19FA22733015A31F2796A7FD835C731E56D1AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820575, "uuid": "e1bcfa0e-f39b-4f8b-afba-6481c3190ba5", "value": "768:mxerVdEc2FE/bove2wylzJ3Y95qysxWvmuN8pXPPC0qXxy1kXkAaEw:M4rEzhve2wW1K3lvPN8pXC0q81c3w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820575, "uuid": "ae894321-6b80-43a9-b235-fdb72d6030de", "value": 61760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820575, "uuid": "bc4e18b0-e51c-4c57-8eea-0640cee0b4ba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc263133-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820576, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820576, "uuid": "79fb257f-a1f0-47db-ad23-82d3729670a8", "comment": "Malware payload (Mirai)", "value": "550b2c48e2f191385dc9793a621d5289", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820576, "uuid": "f17fa7f7-b771-46a3-b7cf-f4b1d728972a", "comment": "Malware payload (Mirai)", "value": "5de45d209e4920a2d700f8848cdbd4221953b1d802d489ce4396c0da156036be", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820576, "uuid": "f596d1ba-91cc-410c-a7b6-294e86da2bfd", "value": "T1C4730A45B8818A16C5D813FBFD2E018D332667F8E2DF7212DD105F647BCA92B0E67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820576, "uuid": "7f910b3a-c5ac-485e-97bc-66ab500852f8", "value": "1536:eNnpO3C6BTG9CJn7UicACQo6zcZuY6ZvNrSVyo8nIMgiiRlFz1jd42+:f3C6A9a7UZ7ey29MvRlFz1h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820576, "uuid": "5f197658-2595-4b5f-8ea6-a33151551e40", "value": 75056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820576, "uuid": "b62cbbbd-d6eb-4f4d-a546-8a48d3e98333", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc064a06-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820629, "uuid": "013ce49d-459c-4d78-85bf-4a6de18c6f68", "comment": "Malware payload (Mirai)", "value": "1686e4f416146d361beca55e818e12ec", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820629, "uuid": "eb8377e2-2613-4046-8228-c2ae01fcb21f", "comment": "Malware payload (Mirai)", "value": "53b083aaaecde5e17a02217c6234705985c29c7f2ed2079f0021390fe9fe3a01", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820629, "uuid": "2c324bb9-8471-434e-ae61-26ef8ffe5ad8", "value": "T1AC434C4332280E17D5921EB0353F07E083BEF95122F5B68A650FDB668639E761086F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820629, "uuid": "ed7eb0b7-198b-4f12-ae5a-526b3e390cb9", "value": "1536:R8CkCVo97aKfzl/L+1zlv3vbxudQCwBGagd42+D:Rzy975/M1jxMQzGPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820629, "uuid": "a196eae2-bd30-4906-ae9e-1d3dbd53f206", "value": 60360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820629, "uuid": "860a7039-20ce-4aee-a721-7e8626b24383", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc07450b-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820629, "uuid": "96e6d42c-df1f-4e9d-8a78-9dc2305690cf", "comment": "Malware payload (Mirai)", "value": "3c620508896da2225bdc54b20777609e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820629, "uuid": "5a288f2c-8700-490b-8737-9e87d356e00d", "comment": "Malware payload (Mirai)", "value": "121c4c8c0ae58e61e988bcce2c42b769ed3d2c440a1546e4642dcec8e75b5a74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820629, "uuid": "700e2bc6-da7e-491d-aa40-696d555a8963", "value": "T126837016BF611FF7EC9ACC338AA81745289D611E21A93B75B930D428F25F25F15E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820629, "uuid": "37aa4972-3165-4b1a-ae09-2c2ea6ac9ca2", "value": "1536:FwRpHZ4tqJrQVw2HKW0Znwju4aLGZzLq0xd42+5:Fwf54t6Ow4KW+LGL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820629, "uuid": "c1c4e985-c046-494c-8e86-b137d2cb5835", "value": 84172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820629, "uuid": "af23a709-dfed-4bb8-8012-fb88f7fb9c27", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc1207bd-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820629, "uuid": "c25c25e9-0fc3-4344-b288-959991efe523", "comment": "Malware payload (Mirai)", "value": "51d1fdb57babc1749f297949b30670d3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820629, "uuid": "422994c2-2ba2-4719-b582-6987077f11c4", "comment": "Malware payload (Mirai)", "value": "bb0becde56d9412563a2bfe4fa7cd4dfe15c5124055f70f55c54116ded37ebc4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820629, "uuid": "d739ebf9-0ef1-4025-b7a9-45f385139786", "value": "T17673A70A2E35CF6DFB9A423597B78E219758339626E1C245E15CFE021F7024D341FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820629, "uuid": "0434685b-f1ba-49d2-a035-983c828e81ee", "value": "1536:AoA0LSTuI7u4XyXcvCEyUAFpRH2gd8VU+xo/WU+a2jI/bdLiyId42+f:Ao7STuSCXQHcpRH2giVU+xvU+a2jkbdJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820629, "uuid": "e8ef4d9e-c3f9-488b-a642-f31333049064", "value": 80540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820629, "uuid": "c70ce84f-31d4-4bd9-b41d-07162eb8f20f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "00778671-3de9-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776820636, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820636, "uuid": "4c359243-25ea-4813-bc31-d17f56b4404e", "comment": "Malware payload (Mirai)", "value": "258e08c56ed3def70c3ea46a3f3371b7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820636, "uuid": "788ff232-c4da-4be8-8349-cba8c4a1b1e7", "comment": "Malware payload (Mirai)", "value": "88a9202da70c255a5bbe28eac3607c6a39ae6b3a657a5e6b200871fc82ee7681", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820636, "uuid": "6e45456d-c001-4f23-ab5e-38c0d4c7b0b0", "value": "T17A438D36C47F6C98C1484678A8254A746F63F50C81A3FEFA5A8187A59007FBCF6583", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820636, "uuid": "8a7cb2ea-7f31-419f-b473-206f3bea8a7b", "value": "1536:y9Hn7a+9GwtZIQwmMudqtT3Z/NvPQCNRd42+:y9H7a+gaVqVZFvPQE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776820636, "uuid": "b71e0740-8cd0-4a35-a101-c329b8949fff", "value": 55564, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820636, "uuid": "144985ea-95f6-45b4-b684-c3f5988270eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4eee4e4a-3c97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776822928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776822928, "uuid": "31fdfc55-c2b0-4a62-a6f1-1afda2fd920e", "comment": "Malware payload", "value": "bc094d073d900050a9740a15a01e3b04", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776822928, "uuid": "8299cd88-590e-4b77-93fb-fe42914ab4f9", "comment": "Malware payload", "value": "650d44854e7be2fb8beeae72a1c500b61baf6da9fa1fae9258dc530ebf90e478", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776822928, "uuid": "b6317257-f63a-40a6-a214-4225ef58a8b4", "value": "T109C1626FC87B9CEB17E1806275B1FE1880874E1BDA494811FBCB50B57BC9AA005D1D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776822928, "uuid": "6eb1edb1-4229-488e-97e3-73d047685476", "value": "96:NTAKGWxLhdM4ggdvwuixp8n/81BCh1kkH/:VLGWxLLM4ggdYuixpI7ks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776822928, "uuid": "747dd916-ee39-4f61-803b-71474cd6be80", "value": 5698, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776822928, "uuid": "dc8119f9-ba8e-42b1-852a-fad32dc1ca74", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52e6ac65-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "77136f36-06c5-40ec-aa32-67fd873a39e0", "comment": "Malware payload (Mirai)", "value": "cb1ea44099bd91b5d8d928ac2bc9699b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "a2a1faf1-9898-4e0c-85a0-c4ea02872ad5", "comment": "Malware payload (Mirai)", "value": "3568b7340b25495b586a467143c2a2358f5e802b0d1cfb950030ccffcf301eec", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "585c43a6-de9b-4ab6-b619-dbcd78041c7f", "value": "T11B141A46AA404B13C0D627BAF6DF42453333AB5497EB73069528AFB43F8679E4F236", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "56f5331a-c37c-4a2b-b603-326134568502", "value": "3072:e0F3JNNHJBbWICaqUW0hFOOS5vFNGYT3Qm7Wo2M/REQSm:P5HJVFCaqUW0hFOX5GYT3lf2M/RHSm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825499, "uuid": "4e62c360-d311-4a4f-bb46-30875a9dfebd", "value": 190651, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "bcb98322-1041-43e7-84fb-67b7351f9ec7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52eb9cf5-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "e39917b0-2716-4fcd-b953-b835236eb14f", "comment": "Malware payload (Mirai)", "value": "fb09643bbe3453e9f6ca4d20905e4c10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "c07eefc9-c304-4a18-9d0b-f2e2e1276979", "comment": "Malware payload (Mirai)", "value": "0bc0133a8ac281452011f7b9b36a6ab61bba67b288b1ef98fb5fb51ab9faa093", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "2582eed6-1c6f-467c-8fc9-5d4a1d4a541c", "value": "T191E30A46F8819B12D5D111BEFE1E128E33231B78E2DE72029D246F64778A97F0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "7bca0b7c-ad47-4d98-a991-b9394f6455cb", "value": "3072:tWJgI11Uf0sI5XyJS9sA2aGcYhrkxx2/+R:ob11s25XCKsPa68x2/+R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825499, "uuid": "4058e82c-5efc-4f9e-8163-cbe08437d01b", "value": 150620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "f1f0f0c8-1204-4791-aefe-e44a9d5cc225", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52ed87e8-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "ad616785-917b-4b4c-83df-b6a4e98f9249", "comment": "Malware payload (Mirai)", "value": "b69704a706d046d17bde764ca3b6b93f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "f2120090-5b2a-4f75-9cb1-b494eb817ff9", "comment": "Malware payload (Mirai)", "value": "a06999d7ae2e1a9fe0f0e99181e0758b5c1b486a351afc164799f6e1dd9351ba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "e645135c-0682-41bc-ac2d-b830eaf6913f", "value": "T1EE936CC5A743D4F5E85701B55137E332A733E03A602EEA57C3699E26ECA1950DB0B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "acda02b8-55cb-4054-8bc5-90fb137dcba7", "value": "1536:7apQddvjjh+C3blBFRC0orLcxtPzU/k7Tmmy5r40YINSN1FN4iGnq:2pQjvjt+C3blTRhorLcTPAeTEr3VkNcq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825499, "uuid": "3e9c0ecb-c2d2-40bf-bfbb-5f8d3a07017a", "value": 97548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "650893bd-8faf-40da-a3f7-9a5e33a6bf51", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52ef59e3-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "106de8d8-418a-43e2-affe-a139659e8412", "comment": "Malware payload (Mirai)", "value": "9caa641bd4a4e9780a7e37b452d85b00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "504846c9-379e-4889-bb10-5ecd1fed4280", "comment": "Malware payload (Mirai)", "value": "0e3382a7937d78421802120f14d6c712b8cf452d7e2fe18d30cfe6cbced8373a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "fde860ab-4d2c-418e-87e0-c8461f3c7592", "value": "T1F3D33A06731C0A47D2632EF43A3F27E083EFDA8121F4F644655F9A8A91B1E361586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "19b4c1ec-5a08-457e-b46a-7193fa813fda", "value": "1536:5WM4Crntg3uZVoBZgQMxfa1qITG5HGXmY+0KXc9f8vATpEX9lejtSqqVoLSG1A0g:5WMtgoVegQMxxIgpY+7c9pTCG1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825499, "uuid": "f9410fb0-adb6-445a-92ac-791176d155e8", "value": 142228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "97b95c0e-0483-476c-a249-ba897285833a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52f0d751-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "225b54fc-5260-4a16-a8a6-c3418604934e", "comment": "Malware payload (Mirai)", "value": "aeb3a9caccc5eb120899adc4aeec499d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "d34ddef5-236f-482f-9a4b-9e33864d8d72", "comment": "Malware payload (Mirai)", "value": "c9aa8359dc6b56de305504b55b100d35747a1ce68f971ea3fd42600d02b07e24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "55e4d345-f766-4293-83f0-20835e65675e", "value": "T186D32A41F9414F23C6D612BBFB5E428D772A17A9D2EF72039D211F25378686B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "c518293d-d174-4467-9f82-118b12b7fe04", "value": "1536:a3Du4G5c5BEsqEh6u0eYWgAMaz4V/HFTcVmAWTNPdmOAISeSxLme42Nfly8wywMF:a3DiGqkKXWgq4RFStWTlTMNmevmZO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825499, "uuid": "d49603e3-7486-4e67-8252-58d717ce88c7", "value": 138016, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "c1e6a13d-870b-4c03-a21d-6a5d740f419d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52f2ce39-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "b6290217-a1df-4fc0-b186-d3f673703798", "comment": "Malware payload (Mirai)", "value": "e55a1c6358038e2775b7399eb3f3d724", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825499, "uuid": "c68174f1-c1b3-4964-8b71-8e25d206abd7", "comment": "Malware payload (Mirai)", "value": "41c953d92959ab56f3f2e248b41b8b7272e9aba4dbe868f221808d6c3fc9a25a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "0e5bf481-f804-4779-977a-f6a07101ebb3", "value": "T1DBE33A07B5C184FDC8D9C1B48BAAF53AE936F45D1138B26B2BC4AA171E9DE305F2D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "1e19e04e-9ffe-4a14-aa4c-235f33528c8a", "value": "3072:ADKPkibws4eOk6uBm2MCkLr/SkS0Se23pPSBOVVFE:ADKPkibws4eOk6uoWVZbFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825499, "uuid": "0e676457-5255-497f-a157-dba647d82161", "value": 146056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825499, "uuid": "6d163319-ba1d-4e68-b088-18230aa8d14b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75607a4e-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "48f382fb-4fd2-4125-aaec-e80c84bc0ee8", "comment": "Malware payload (Mirai)", "value": "79dbc67a411ac3d6c5c4990de2ada68d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "0ad8b4af-609d-488d-8025-39bf41022d55", "comment": "Malware payload (Mirai)", "value": "3724c804231366ed429dd3c6ecf8cb51955a35fe0bae41d3c1dabc5b58f95186", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "9adc7580-04c9-4ab2-a803-f59be78536a4", "value": "T11904A71E6F228F7DF668873147B78E25975C23DA26E1D680E1ACC1105E6039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "fd3548dd-8d27-44d2-a55a-594bb0a0622f", "value": "1536:fmlcW4LXVIwIM6xBS//3FRQS/Z+aiuinlvfQ9IeilifVG9b4TXDHZWupLSG9A0+:8D4Loo/VZ/ZauilvfQclifiE5WuNF+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825557, "uuid": "7bb75080-ccb8-479f-9175-0ce9c0165067", "value": 182636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "b75f9e2a-b2f9-4356-8ffd-059d3732047f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75612978-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "4f0e56cd-d3ef-42e4-b3ca-4c16711a6805", "comment": "Malware payload (Mirai)", "value": "fb10f8b9491b567aa4f480a3df26d8af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "5ccb8b84-66e2-4eff-89e3-3e20ad29e23e", "comment": "Malware payload (Mirai)", "value": "924767f2a315cefb9a044e4b0a17f3d4905f3cd34e531ebf50d99be79547338c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "77fe9d99-cc63-4d74-8855-12f175b82c13", "value": "T1EBF33BC7F800CDBEF80AE73748530905B230BBA255825B376257797BED3A0991977E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "234ec5f9-4fff-44e4-b8d6-bf54f6aa06c3", "value": "3072:ZV54c/y0cSWqyAl9ed9/1qVM9uBSAsgcVljbiNLHbDL0i:ZV5R9yAfed9/1qVaursg3LHL0i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825557, "uuid": "0f15f496-bdd7-4d10-bee1-6c398d6ccf99", "value": 157504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "4d076cb4-8f7f-48b5-9d4b-019c9b56f5a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75626a5c-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "634d326b-725e-4e45-b13e-97080ad54375", "comment": "Malware payload (Mirai)", "value": "cb18f3e2bc8af39f5a85072912e1eaf9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "d9a8d957-a11b-496b-aee9-eac2776ba80a", "comment": "Malware payload (Mirai)", "value": "495630dca6cc2b16f4e01c5dc5e9af3189ca3cf405b5f1ef1a52d061fae43d05", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "74c3c46f-7304-4004-8521-9a558269b29b", "value": "T172C36C73C8296F98D655D1B4B071CF781B63961181871FBE5AA7C2B58083D8CFA0A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "b6f73836-699e-4b5e-8594-887166cfd025", "value": "1536:ybX/MtH3tyYjyBjTy4yC74KaTRLIWwswIRaqyW4HqAvhgiLSG5Aj6:yLktHgBq4y+/alwswiyWMq8rO6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825557, "uuid": "f1537013-c242-4faa-8806-259153aebf0d", "value": 125760, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "5978d1d6-c81d-42f2-bb1c-be89dd741385", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "756902d4-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776825557, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "482a8823-068f-4d63-a5a3-eb49e7133bc1", "comment": "Malware payload (Mirai)", "value": "b67630c8b10bf5258d1ce29ff6bb66ae", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "91676f8a-2182-4970-a4b8-3435007ee09b", "comment": "Malware payload (Mirai)", "value": "e9121ee0d14131466be33b166371afae3f5212b016736fdbcd0e0d4e650bfde2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "b546a00d-39df-46f1-a669-342488d3f27d", "value": "T144D31A41F9404A27C6D612BBFB5E42CC772A17A9D2EF72039D215F21378786B0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "dc81f9fb-6477-4744-b1b6-80ac358a8e61", "value": "1536:8+rPxAWgV+8JqvU5ZlVq8KApeLIK4Vv6t9T5KEizD7dmOHyISjBtEu27gWlv9wyY:RrP5Ns/lU8K3/4kDEEizHi/jK1HO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776825557, "uuid": "bcd69024-8617-4fad-83f3-cde251bc5911", "value": 142112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825557, "uuid": "689973a6-cd09-4668-87fc-b585ac32c4a2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96a6260f-3a60-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1776826874, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826874, "uuid": "a2033832-08c2-4817-8e99-fe5316e82488", "comment": "Malware payload (SantaStealer)", "value": "eab63c490102d94c5a3b3914195c3530", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826874, "uuid": "fa93f443-3e3d-4346-b8ac-bc3bac34bfc8", "comment": "Malware payload (SantaStealer)", "value": "8f3ddbc6090f6bbb75805de8ca284953696e283b438cfa9a45c3713c6ebcb70c", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826874, "uuid": "e29b2ae0-2945-48c5-a62a-7219b245c6b0", "value": "T18267E0DBF60DB9B4F315956AC7D0EA086F8FF8B180E391A001D11B3396AE946DB874", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826874, "uuid": "12ba4b85-9acc-4083-af6d-901b9a627b1f", "value": "5db62f1c7bafdda66124cfde5230bea0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826874, "uuid": "6054709c-9061-4123-9002-925860549297", "value": "786432:hP1TC3oQmx3imvWEmBjsWdMruJZrize+SkjRn:p", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776826874, "uuid": "153bfdab-d6b1-4a32-95cd-5fb337b10942", "value": 30016722, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826874, "uuid": "e14394a8-f609-4cad-9fd9-075bb4685b32", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0192ae72-39ba-11f1-bc00-82aee05be84a", "comment": "Malware payload (SantaStealer)", "timestamp": 1776827407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827407, "uuid": "046af1ba-d691-4882-a0e8-13066c93332d", "comment": "Malware payload (SantaStealer)", "value": "f9d36d07fff212667f54ca2c37b65961", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827407, "uuid": "454c3346-ff2e-4813-8b71-6cb7a2b34912", "comment": "Malware payload (SantaStealer)", "value": "3e5d00fd22666970d708c6a0f8813f81689f21eb6e6d3ffbe01e19023562b630", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776827407, "uuid": "1d4c7e2f-6069-499f-ae68-45d0598e0923", "value": "T1BBF23A487B98C12BDBAF0E7DB5621A50167196621203DFD53ECC64EEFF937048612B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776827407, "uuid": "20b60714-bdd2-424d-b1ab-770bfe544e8c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776827407, "uuid": "cf809978-b868-4e92-ac37-4d832b5973e4", "value": "768:bmQZqx1lYcTYbFyf8qbIKPjnbaoXbYC10koH:b0lYibIKPjRbPoH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776827407, "uuid": "b29b1c84-a203-479d-87a3-f3e219e7272c", "value": 36352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776827407, "uuid": "2300b071-22af-45d0-8ac1-2bccaed9e5b1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "249f9f74-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776828858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828858, "uuid": "2ab5e1d1-7350-4f01-8410-c158ac8c77df", "comment": "Malware payload (Mirai)", "value": "770333857d7a7deed8dec55b55d3c47a", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828858, "uuid": "564aed42-85cb-49d0-960c-dad08f974630", "comment": "Malware payload (Mirai)", "value": "78c300d4b4d86d0e0163e8c48b0b58cbbe55ebddab0b1221d0a171c27feb6165", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828858, "uuid": "9ca652c6-1a07-4b66-afc8-88cab6ab3b5e", "value": "T1C4E09BD7F1312AC34044FF08F4A6CDE5E156D7CD11875B982EEC7A6F863C8107914A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828858, "uuid": "c1a43cc4-5cbe-4c7d-baf7-ab9026499786", "value": "6:L6F0oXFdih3kq6L6FiFdih3HQl4vL6FGoFdihdzXXyL6FG1NFFdihrNIh5E6FG35:EsrOsciqspXXMXsrNIh5WGjs7cKLKu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776828858, "uuid": "202b6467-aaa2-4a3d-8ee7-42552b1786ee", "value": 416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828858, "uuid": "e13d24fa-6246-43e3-80e6-a6f0f8151e05", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6533eb4b-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776828966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828966, "uuid": "8380e077-9976-41e3-a7d6-ea3f8e530d5f", "comment": "Malware payload (Phorpiex)", "value": "ae21331ae091c4aff18abf011653aa55", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828966, "uuid": "0a205489-c159-4206-ab6d-04bbbaedc209", "comment": "Malware payload (Phorpiex)", "value": "30cd1dbd2a000503fd734ef2f4656ea46cd1ec0867ac8ec4b75378e88319c3b0", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828966, "uuid": "2eb8e7bd-4814-4695-9160-d93efcbcc8f9", "value": "T122824B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828966, "uuid": "589ec039-26a5-4602-8957-899e0229ab0b", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828966, "uuid": "f707c7f0-1123-47a8-9772-925b92bd94de", "value": "384:dI78VGQic1Kwvw077u9NHu/gBhav8U9ch:WAE0769Zha0UW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776828966, "uuid": "a19b0580-9ece-46aa-93dd-767f01d46f9d", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828966, "uuid": "b031f4b3-96da-41d7-b919-69c10fb01457", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "11497ca7-3e05-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776832691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832691, "uuid": "dd97ad3f-1ec6-4478-bce4-f5a87b630ab9", "comment": "Malware payload", "value": "d0e5ca1f1da9ba66454f16d5f5b586c9", "object_relation": "md5", "Tag": [ { "name": "pw-4477", "colour": "#96b20a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832691, "uuid": "7d6c73a7-7638-4772-818b-d4ae935356bb", "comment": "Malware payload", "value": "76cac423bd929cac7b93b4b5a44d468a48942327e9276a3d616304c6da314cac", "object_relation": "sha256", "Tag": [ { "name": "pw-4477", "colour": "#96b20a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832691, "uuid": "54a19dd5-231a-4774-bfb8-31352778b3ea", "value": "T1DF0733E936FA4473A39C0D325FD1D05F65FB3EA18D6A7C85029EC103A6E49907786C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832691, "uuid": "71b0b805-f524-4d2d-96db-2a799f41bf97", "value": "393216:y4QiAUSisQOSa+cKsmvpXDmQo+pRWCQFHgS1psvNssI:y49QisQi0vcj+pFAHgS1yex", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776832691, "uuid": "684273b0-a8e4-4f40-988f-21a98c6e1ffb", "value": 17869070, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832691, "uuid": "81e4cba7-a523-479c-8766-db7b500f8654", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44eb8e17-3e05-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776832777, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832777, "uuid": "b02e0cff-47d8-4c73-92d5-ae3cdb9ff669", "comment": "Malware payload (Phorpiex)", "value": "96d30b26dc652fa01dad228fffb2ca60", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832777, "uuid": "6d5e49a7-0b72-48b8-b1e8-394f4d47bdcf", "comment": "Malware payload (Phorpiex)", "value": "e20627e035d0d1c7e9d4547a2a687866b7d62102a2b96aef935d3f0dec8e4adb", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832777, "uuid": "45b15c9f-7027-4302-8b44-07449dd8deef", "value": "T1D2823A0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832777, "uuid": "e2ee4d8d-dcc1-4571-89a9-8f2acc5f510c", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832777, "uuid": "d5ff448e-83c5-4103-b8d7-fd780b3700ae", "value": "384:TI78VGQic1Kwzw077u9NHu/gBhav8U9c2:AAo0769Zha0U1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776832777, "uuid": "f5cbfdce-bb46-47e7-9ecf-ec956ed71297", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832777, "uuid": "c5d6ae60-5c8b-4b2e-8d94-5ffd8c0abb2d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54554abf-3e06-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776833233, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833233, "uuid": "b0388916-ea25-4c19-8d03-da7f40d330d8", "comment": "Malware payload (Phorpiex)", "value": "391680868d454433d6949e9048195985", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833233, "uuid": "e9040a9e-b182-4f21-a285-10769cde3c5b", "comment": "Malware payload (Phorpiex)", "value": "cdf876273c6175f4cdbaacd6ab361ffde60edb2ac3ffa2bcf8e74c5a18f4e462", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833233, "uuid": "d0fc68da-f90d-4f11-8771-0a100e0b6ed4", "value": "T1C1824A0FB8424226E1D110B09572967BD9BD9C7A738424EBF7D44ADA0B686D5FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833233, "uuid": "258dc488-5ff6-4dca-a29c-e69f8a6116f3", "value": "ca5592c42b764400102051895df05794", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833233, "uuid": "6b59d4b2-8adf-46cb-9eae-7206adf99aef", "value": "384:AH1tbmV2uL1EaWwtG0yu9NHuage/zav8U9c:6sVPo0P9Nza0U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776833233, "uuid": "ad19b087-b40e-40cd-9da9-334a12b13a12", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833233, "uuid": "5c6b4034-06e3-44d5-ae33-203f4c5857fa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "12c8e5f6-3e08-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776833982, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833982, "uuid": "4efce1ed-063d-4135-b03b-4641ff88efce", "comment": "Malware payload", "value": "7de22955c9e2d21d9c41e22109900992", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833982, "uuid": "8796cf4b-0a50-4487-9e3e-39f4c3a5e3ed", "comment": "Malware payload", "value": "f0a656a40e1e8b93cd87e52ac8b7a8563166c2a94bccc9e19f2a741c6ab9a020", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833982, "uuid": "5d726525-6c64-45d6-b45e-1ac776728db7", "value": "T1AB42CF488713ABECDAC8F55351AC7B4DB61B69C333BC7D50C0CA151715B6D3E0C25A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833982, "uuid": "b9051cf0-92da-4afc-853d-f14339944cc0", "value": "192:LPspxljZyJvkpm3mRI97JyUqoCl8pt1XizZEwC9Lw/KIhI0t/B8tZ:L0pxl0vC3a7JuoC+ptRu6w8UCIhI0ZB8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776833982, "uuid": "a94d352b-5482-4775-8995-17e8b78b6609", "value": 12032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833982, "uuid": "6ac897f6-89f6-48dc-ba56-20eb00dd29a9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19dbb988-3e08-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776833993, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833993, "uuid": "047ff4ab-1d64-4e03-9b3d-4635db050ac2", "comment": "Malware payload (Phorpiex)", "value": "9d180b92c8d1a8fedeaca259fe149cab", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833993, "uuid": "17fa34a6-ee14-471b-82fd-d13b48374924", "comment": "Malware payload (Phorpiex)", "value": "7548fc98358d15eaaa8cf8e29824af49d5d440ae991fed24ee8810002bf17cbc", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833993, "uuid": "047273f3-9590-40b7-843d-bd2c6e8a43e8", "value": "T1C2825B0FB942421AD0D100749632867BDAB998B637C810EBFBD08AED1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833993, "uuid": "cf6fe274-da16-4b7c-8f02-0cfdad062c09", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833993, "uuid": "65674f82-f7eb-4105-9da2-aee70d99a7a9", "value": "384:6I7MVGASM1KwngSZb7u9NHuagRhav8U9cw:vQ8Ub69+ha0U3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776833993, "uuid": "1728cc3c-6e1c-4d47-9027-fbc778fe7beb", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833993, "uuid": "35e60b93-d130-42b7-ae94-70ab9260b6cd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38ceab6e-3e09-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776834475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834475, "uuid": "70410b91-63a0-46e0-9c9d-05f6bba1f4fa", "comment": "Malware payload", "value": "f074a6a4b24187529f67ae2dfaa6334f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834475, "uuid": "a6b6b626-fdd8-4b30-a08d-b4ff5409624f", "comment": "Malware payload", "value": "2a2457cb9c1cb0ce658b58cb54e21cc4539f005ebfaf54efc3bb9359c8709a77", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834475, "uuid": "6bbbc20e-ce59-484c-b390-325e50bd9669", "value": "T11593E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834475, "uuid": "96ddb12b-a39f-41ce-8130-5301a1efed6c", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXkIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776834475, "uuid": "0caacd20-468f-430d-bf80-2829837eb440", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834475, "uuid": "1cfaa8e6-956b-4e94-9402-15affcdb6885", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaf060b8-3e09-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776834666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834666, "uuid": "cab1e687-bf03-453d-91e1-d35754698153", "comment": "Malware payload", "value": "9c739dabcd178ee6ff360e989eb96c0e", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834666, "uuid": "3555cf2e-e21f-4a78-b1a4-c83c8d37959d", "comment": "Malware payload", "value": "d23f7b23c07739b5a6ce41f15595ee8ff12ab876b53e859ec649f8f4380c809e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834666, "uuid": "f164c599-45a8-48ac-94bd-c9aa897feeef", "value": "T192F13B0BAE824061D39A0DF02BB240998B7E545317C770FFFBB3585A0FA578484932", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834666, "uuid": "a342defd-8566-4a17-826c-0a1f2f8efffb", "value": "410554daf1dc8e383fe9a0f9f8390a01", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834666, "uuid": "425aa831-2401-47b5-8b3c-c843f53f8d98", "value": "96:55/Qcr8vdodRjDOAl2YyTNW2Nr3SJxGEp2qp4iC7tCEI:rQvdml2xAKrCJxTptp4I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776834666, "uuid": "1eed547b-a3b7-4b08-a9a8-c49f5f81d147", "value": 8192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834666, "uuid": "52cc9101-540f-41fc-b659-5919b68eaf09", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53991c52-3e0a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776834949, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834949, "uuid": "70853d24-7e25-4f49-8ef6-6d42a4cf2c21", "comment": "Malware payload (Phorpiex)", "value": "ca3ff1eb26702eef0a2fefd636d5c3fe", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834949, "uuid": "ad5ab014-be38-4d62-af2e-789d2718a6f2", "comment": "Malware payload (Phorpiex)", "value": "eaa6fc0957da85282da01af471314a842f103b810006c224e2fb514ed0589660", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834949, "uuid": "4c46f0a1-c181-43ac-bdf8-2986b4b62565", "value": "T18A824B0FB942421AD0D100749636867BDAB998B637D814EBFBD08AED1A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834949, "uuid": "f49bef5a-5589-47cc-a1f0-85bc39888ced", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834949, "uuid": "6c12a2f4-b011-4a65-a8c6-9e474fdf6fcd", "value": "384:eI7MVGASM1KwngSZb7u9NHu/gRhav8U9cw:TQ8Ub69Jha0Ur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776834949, "uuid": "e299962d-8cae-411c-afdf-09405adc482c", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834949, "uuid": "04c9b9b0-6b89-49e1-9a7d-7eb8975f74fb", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "18536db3-3e0b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776835279, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776835279, "uuid": "2ba42b69-f091-4f0c-a375-7462830f3b09", "comment": "Malware payload", "value": "06c0991f21d1489257490a3153f45397", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776835279, "uuid": "027568c9-a717-4bdd-bbb3-bc3d96a713c3", "comment": "Malware payload", "value": "c972722789f4a8968dec3654c855ae8a6efd2b08ff0ad748dccb48e5cb0769c8", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776835279, "uuid": "b077dbcd-20a9-4ad7-a3e9-380fcf723c93", "value": "T109453357788D641200A60D2E228D4FF7E2FB346FD845039C0A4A6FB6EBE74ED6271E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776835279, "uuid": "e746782c-8829-41a7-833c-38c1fcbb244a", "value": "24576:2wWteZseG8HtYqqqWoiO2Fi50HkUr+0GOAhnCgno7c57uQguwn:i8N2s285jUrFzAQc5Kjdn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776835279, "uuid": "dd4201ad-8e6a-4c3a-adea-0cdbc1530d0e", "value": 1265427, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776835279, "uuid": "8e3d18b7-7f5b-418e-89f7-e1039fa7ffbc", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dfb915ae-3e0c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776836043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776836043, "uuid": "69eda33a-77d9-4b74-a66d-088129970736", "comment": "Malware payload (Phorpiex)", "value": "552d2e3418b0d90f75d728f2ee5fefcf", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776836043, "uuid": "06af518e-c81f-45a5-912d-ba8f1eb2cc5c", "comment": "Malware payload (Phorpiex)", "value": "89c067ac857aa6ccc6e3ea1db06429e12acf9110bba7795c735451f3b99ed7a8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776836043, "uuid": "282bb5d7-e215-4a4f-adbd-d795259b0b8f", "value": "T13E823B0FB9424216D0D200B49676867BD979A8B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776836043, "uuid": "60622bbb-eed0-44b7-9489-8f6cab1784b9", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776836043, "uuid": "f0d1d629-2d73-4d76-a728-b332be75e2be", "value": "384:FI78VGQic1Kwzw077u9NHuagBhav8U9cJ:eAo0769uha0US", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776836043, "uuid": "7e4510f7-2c7d-4699-bf2e-cafbd7e7f86c", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776836043, "uuid": "4d312a8e-dbac-4b1c-b0e8-6d1053212521", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dbb78b46-3ddc-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776837136, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776837136, "uuid": "6d98c010-d391-4167-b950-82bb6dc718a6", "comment": "Malware payload", "value": "9f35fd3bcbc01b097602dbd85d6ecfbb", "object_relation": "md5", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776837136, "uuid": "c8d790f5-c869-46de-b5d3-8cd0410bdbe3", "comment": "Malware payload", "value": "e55529c98f2fdc31a518d3da47802a68d7fe8ba3bde350ee2724acb6932bf3a6", "object_relation": "sha256", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837136, "uuid": "e2adecc8-9bf5-46bb-94f1-792aa49757a6", "value": "T140D56C6D2E4E58B2C3EE536199763F5DB674B3621D23681B26BD30C8CE212F53A07B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837136, "uuid": "5e263eab-dd09-4c22-a379-7b5912f04af8", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGrvaD/B/oP3D0K:8UixbItdTrJoFVPMvXG7aDJE21V0Tb3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776837136, "uuid": "9293ff70-d632-4a6f-be86-bd30ac3989cc", "value": 2822993, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837136, "uuid": "c3466eeb-a0c1-4561-9bfd-2a6c36043a8c", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4707d92-3e10-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776837769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776837769, "uuid": "40094ec6-2aba-4b70-9f56-ba22d9ed4786", "comment": "Malware payload (Phorpiex)", "value": "35b8858f1fb72e09aca7c9e788bffb27", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776837769, "uuid": "21d55be2-7d07-4e0e-b4a0-2429a6b45cba", "comment": "Malware payload (Phorpiex)", "value": "98ba0d26044bd6c4239c1d17e678bc1159ed8fa5b9b08b06a7c452f602abbce8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837769, "uuid": "f25e0306-143a-4513-a8c3-26ee9d31d8df", "value": "T151824B0FB942421AD0D100749636867BDAB998B637D814EBFBD08AED1A686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837769, "uuid": "8335aaa0-6f72-411b-951e-918e3c7695f6", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837769, "uuid": "55b3d596-2fbb-4e4e-8f4f-8855d5a4648f", "value": "384:XI7MVGASM1KwngSZb7u9NHu/gRhav8U9cs:kQ8Ub69Jha0Ur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776837769, "uuid": "6481418a-0353-4c15-bd99-40da531bdb4f", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837769, "uuid": "6a0de6a4-3c83-41d4-a5a8-a3b6996a0644", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95e37ab8-3e11-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776838067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838067, "uuid": "269c101d-b508-4444-b942-f3bba7fe7026", "comment": "Malware payload", "value": "b4200911ad8efa8c98343ec2b1a32182", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838067, "uuid": "e593e531-6767-4b2b-8381-dac774386121", "comment": "Malware payload", "value": "89c763bf31f1bd2e9e78007843b56fa2be59e49988f5fbcd64411688ea6efb3a", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "OffLoader", "colour": "#3e890a", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838067, "uuid": "d072275f-3a76-4830-8f2f-cd1d9c95a5e7", "value": "T1A4C25C2DA6A6D3A5DED58AF5F4290737FEE0B0816170031F4720C67E6F17522A91BF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838067, "uuid": "19481e5b-d991-4274-95ea-c0e1641a86fe", "value": "cb12d737f70331a45875da1d1aea73f8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838067, "uuid": "808400b9-31d8-4ad6-a290-609387950ba1", "value": "384:IGp1rKgcnmECj4gNEUmzz6OJNC1wOqNXgZtiAOq2rJr5YJlweNBL5pABHC:ZCbnmEC0gNEUi6+CqR5utiprtiJa6BK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776838067, "uuid": "f8296ed0-0f4e-4261-bc9e-2f0adbfc3fcf", "value": 28160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838067, "uuid": "ff19149b-a157-453d-a359-f201b343bff5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4adc78bb-3e12-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776838371, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838371, "uuid": "68612999-a9e6-43d1-be35-5311851824e4", "comment": "Malware payload (Mirai)", "value": "c66cf0d7b36e38647693858a2c83c2a6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838371, "uuid": "01df5c16-eadd-4ed7-9008-b08b3f78c691", "comment": "Malware payload (Mirai)", "value": "d7e4cadc5fea4e7936abd87e69ff2a246c47904210000ec15b68092bd8569404", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838371, "uuid": "2e081a39-f2a6-48e1-9abf-7ad5738b80b2", "value": "T1E2258E46F2B334FDC057C03183ABD762A536F46941312D7B26C4DA392EA6E701B1AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838371, "uuid": "b291e7ad-6a65-441a-a404-9e9b6241cc54", "value": "24576:iVX1k2Lso1cRk2RPbW6Nrh9AM84p8UCb5HKRoFix:pjW6NrnAM7p8UCNko", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776838371, "uuid": "15c03a33-2625-4ab7-b6f6-0416d6db97e4", "value": 1049408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838371, "uuid": "715c65eb-e96d-4756-8f24-d65dd3d4c268", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23e3a508-3e13-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1776838735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838735, "uuid": "0137bb5c-ad2c-4abd-8630-982ad3b038ac", "comment": "Malware payload (Phorpiex)", "value": "2a63dbdbafb1f5e0b629d337baf019ba", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838735, "uuid": "1e4d46e0-240a-4e62-b17d-46b03f766a71", "comment": "Malware payload (Phorpiex)", "value": "510291a735a43bd73c73a172e183b2888a83a0ff69c6c16b19f37a9109d1c074", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838735, "uuid": "cb394ed5-9e9f-4ad8-b1a1-d10fd1009348", "value": "T130824B0FB9424216D0D200B49A76867BD97998B637C814EBF7D08AEE1B686D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838735, "uuid": "572e5b78-7f0f-4d08-9e4f-84f5044c5981", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838735, "uuid": "63538dad-ca00-4703-ad6a-2fa749692b14", "value": "384:MI78VGQic1Kwzw077u9NHu/gBhav8U9cS:dAo0769Zha0UZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776838735, "uuid": "b25fd7b7-09ea-4d4f-9c91-a2a2c8f91a92", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838735, "uuid": "17b220be-afff-4b17-ab19-e04385c81bb9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3613281c-3e13-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776838765, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838765, "uuid": "4d5dfee9-6e73-41e9-86fa-3f22ade84cc9", "comment": "Malware payload", "value": "7a8cb9c2ef267fae7a644a463c05e380", "object_relation": "md5", "Tag": [ { "name": "pw-5585", "colour": "#f3c53a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838765, "uuid": "fb1d1f13-e1db-4e30-bbef-0be42f36edd7", "comment": "Malware payload", "value": "a71115b7ced768259cb5058ea8c3ecb8a8f94f40d2eec0dc1207c5fb48319970", "object_relation": "sha256", "Tag": [ { "name": "pw-5585", "colour": "#f3c53a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838765, "uuid": "c6853396-38c9-4d50-a085-2e9586484482", "value": "T16C0733595A277C87B29F038B049712D3D0DF0D789644ABAFDD12469F87CC82FA225F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838765, "uuid": "a67a25e5-3462-40f4-acf8-0bef46f765b6", "value": "393216:S472cSkbG2lZoTS5yQq/4JD+5OA1Cqt09z+B7AEhE:d72cSyVAS5yJABuCqG9K9Tq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776838765, "uuid": "58b9621d-7ea0-43ef-881b-173be21bc82c", "value": 17455214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838765, "uuid": "c43053b0-bbec-4617-ad36-cc137bbea5d3", "value": "application/x-rar", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a20fc0-3e16-11f1-bc00-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1776840367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776840367, "uuid": "ada95a37-6b1c-46a3-afff-f1640b227ea4", "comment": "Malware payload (AsyncRAT)", "value": "457371960d83375e5c805ebc7b99932b", "object_relation": "md5", "Tag": [ { "name": "206-245-165-5", "colour": "#e4e316", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776840367, "uuid": "10ec0490-2856-47ed-ba80-b0a5934d67c1", "comment": "Malware payload (AsyncRAT)", "value": "2eea097e689004e05f44f04ff22909c96d43d04fa7e5936f3709cf0d3a36c041", "object_relation": "sha256", "Tag": [ { "name": "206-245-165-5", "colour": "#e4e316", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776840367, "uuid": "8ebb0de2-2307-4abb-82ce-18a52044a83c", "value": "T1CA034D087BE44226C9FE6FFA3AB375020770E6075913E74D58D5896A6B77FC085007", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776840367, "uuid": "b065ec47-9237-4494-9cee-7fbd19afe55e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776840367, "uuid": "fc1d9988-7c2b-42e2-b33f-c92415d5b8ae", "value": "768:Jcq50224u+jTIerM6tQ6BD0TFU9Y/OMhnbJ:Jcqm224P4eOgDMFU9Y/OMVV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776840367, "uuid": "3d919791-c451-44b0-8a8b-816ac84562e2", "value": 38400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776840367, "uuid": "056a2168-da7b-4ecb-b5ec-d24035a87aea", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70bc8c32-3e1a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776841870, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841870, "uuid": "25a9ec6d-b0b8-4c38-ac58-04c18f765776", "comment": "Malware payload", "value": "11888aadeeb7696e5134233f13c3d1f9", "object_relation": "md5", "Tag": [ { "name": "83-142-209-13-8080", "colour": "#67624f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841870, "uuid": "12eca9f1-56b8-4c7e-9e83-e9465e1c5a97", "comment": "Malware payload", "value": "35204d0ba3485eb4f0f8104a218e71526d152679f97e65ac878ffb2552f41896", "object_relation": "sha256", "Tag": [ { "name": "83-142-209-13-8080", "colour": "#67624f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841870, "uuid": "087a1cc8-9329-4845-bc65-84965fda28dd", "value": "T13EF58DD2A3A600E8E9B7F23C85568517E7F2B81753709BCF15A44A761F236D12B3E7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841870, "uuid": "a8c82a98-8818-4fec-b237-81b88b7522f9", "value": "fb0a8b4a81655f744a37af985e009476", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841870, "uuid": "8d3fc406-ccb9-4ede-98c0-b0688c2a5237", "value": "49152:zdZEy2B6vflQf6X8uZQoy3vR6QVQy5Z+bm4M/HMFvfGW0/7Z7Ib3jxw5bJ:RHvfGfZvZj1/N/z/owJJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776841870, "uuid": "bef8196b-35ad-4614-834e-dd2264c74eb7", "value": 3484288, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841870, "uuid": "f8fa748b-19fd-4959-894c-48bda7165144", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51755b8c-1542-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1776841871, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841871, "uuid": "3fad56c8-48dc-4a51-a137-6a35574978e4", "comment": "Malware payload", "value": "d7e2b193229aea8e1632cea82b8e5ef6", "object_relation": "md5", "Tag": [ { "name": "83-142-209-13-8080", "colour": "#67624f", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841871, "uuid": "db0c64a7-91a1-48fe-8717-360bd6e021b7", "comment": "Malware payload", "value": "b0e328a131e4d679e9b268552db99ca2d46051b9205a67f9b7f7c1628983daae", "object_relation": "sha256", "Tag": [ { "name": "83-142-209-13-8080", "colour": "#67624f", "exportable": true, "hide_tag": false }, { "name": "Sliver", "colour": "#EB6460", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841871, "uuid": "c8ed46fd-022b-4f8d-8c56-9b8ea21120cf", "value": "T18D873913E8A544A8C5A9D534C6769123BFB27C49873033D37B68FB206F76BD096BA3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841871, "uuid": "2d456f04-9540-4134-a450-f2aa8ae1c305", "value": "196608:gXIKebtBVbf07AKTzwF72xu0bLpHB8FGZ4WmO0sSe4nZBkTEqEVWUh+:gEbt/fa1wFExdhKGZ4WmO0s7+ZRDM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776841871, "uuid": "be7b91e5-ecfe-441b-abfd-b4853bcc5317", "value": 37970104, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841871, "uuid": "f582a64d-21ae-47f1-b958-ac5b76ee1a7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6cb45e8f-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776842293, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842293, "uuid": "28752c26-28b6-43b1-a072-a3c31c1419f4", "comment": "Malware payload", "value": "7a2168d7ae1364ae34360f56f7ad5f2c", "object_relation": "md5", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "rundll32", "colour": "#2c0e13", "exportable": true, "hide_tag": false }, { "name": "unc-path", "colour": "#0a50db", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842293, "uuid": "8e9161dc-0daf-4dc2-ad35-68dcd32b2e5a", "comment": "Malware payload", "value": "d2f3110e8b6705f7757fd7415752a01c3ed4a9e7abe134f1a20b1ee73462a26d", "object_relation": "sha256", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "rundll32", "colour": "#2c0e13", "exportable": true, "hide_tag": false }, { "name": "unc-path", "colour": "#0a50db", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842293, "uuid": "5695e851-05ec-43de-a38a-e6777f9756be", "value": "T1B765A2619472816EF9A9003F51156A33B8FF6AC312D2EC2E4E397FDD41265D24AFB2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842293, "uuid": "b7b9f99e-7537-4bb5-a2e8-9100687616bd", "value": "c2fcdef9e1aff114dd6d39da07414a64", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842293, "uuid": "7e65c180-f0bc-4c3a-804d-9ec305b07c16", "value": "12288:Z5icKLkFI9kFRe0TzGA0gb8IkKhF87MXff5pIvru888888888888W8888888888B:ZIRLkFIC79ToM8IB/EMXff5pIvrOfqD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776842293, "uuid": "c8905cf8-0fd9-4756-bb20-88e4d5574ed5", "value": 1467800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842293, "uuid": "aaaca4fa-b40f-4e7c-9339-5fd58c6ed499", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39d7a293-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776843067, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843067, "uuid": "00c32e40-831c-4300-ac39-7d51cb8c4e66", "comment": "Malware payload", "value": "cc126bb60973b174ca35c225064d711f", "object_relation": "md5", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843067, "uuid": "f3a6e978-1865-4668-98af-4548c61c1cdf", "comment": "Malware payload", "value": "dad7c1bf9f1c81526c82638a23f09ce8ef9c3c7515150875e318d5851e7d7866", "object_relation": "sha256", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843067, "uuid": "bb175356-9d5a-4b2a-aedc-65fc6f93c9bb", "value": "T1AAE45B7B91686589DC9B72B46BC73AB7FC11BD393320D5D65E03032C9DF06369A282", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843067, "uuid": "49bae6c1-b389-42af-ba7b-7045f7b2c53e", "value": "6144:rU7HX6JxtMMy/Oj174Kfiu7n0EZGSpoPD6J/JPCBs5YNGj9TXaoa5u1:rULutW/Oj174KfiuL0IpN/JaBs5WGdF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776843067, "uuid": "c717a8c6-2b36-48e3-bbfe-2836d218acc2", "value": 690528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843067, "uuid": "fbe83175-88ec-4822-9afb-ec41ae27094b", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d69d88d-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776843126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843126, "uuid": "9f49e31a-6a20-43d7-94be-de577bcd6e36", "comment": "Malware payload", "value": "8ad3164710760f3b48301d4be894a825", "object_relation": "md5", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843126, "uuid": "d5337d57-04da-468d-81c6-dcb5e12daf94", "comment": "Malware payload", "value": "0ed12a92d4d5697ab3978471d290a0c1574549106b90f3e378ee6cd3f9e530e3", "object_relation": "sha256", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843126, "uuid": "4e466538-fef2-4927-9e9d-334dce29f264", "value": "T152E45B7B91686589DC9B72B46BC73AB3FC11BD393360D5D65E03032C9DF06369A282", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843126, "uuid": "718439e3-6860-45a2-bc55-71bc4b453ea9", "value": "6144:rU7HX6JxtMMy/Oj174Kfiu7n0EZGSpo4D6t/JPCBs5YNGj9TXaoJ5uS:rULutW/Oj174KfiuL0IpE/JaBs5WGdz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776843126, "uuid": "6f46efdc-178e-4865-952c-acf88a6d6299", "value": 690528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843126, "uuid": "c2e7a2a2-835b-4962-ac42-137261c124e3", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d6b8059-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776843126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843126, "uuid": "9383daf8-74c0-47db-9fd6-5ee38f719981", "comment": "Malware payload", "value": "e5e8f9a1d3bfa585945888e0d930fe44", "object_relation": "md5", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843126, "uuid": "37c5cd23-4615-4481-af93-9a0d7e4b0229", "comment": "Malware payload", "value": "5b05fef4fcebf5d1b69776759cc5bfcd6c551a1e65f05a723d5a9d9de2abd25d", "object_relation": "sha256", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843126, "uuid": "de5db3fb-25f8-407d-ab55-59faff58def2", "value": "T1F0D43977423478D2ED0BB3B5BACB367BFA84B9382170F4955A0257294DF46B2DE042", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843126, "uuid": "3e5c3f57-2d48-424d-abeb-cdb0e7a4c9a1", "value": "6144:plSfdQV7gERhqo32F+g8wzq8VBwZfyvXEUHhSu/D7i0gtpp6mYSzD11RDqQZY:pA07zqo3k+g8wzqaBwFyvRfMp6y1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776843126, "uuid": "278b8bc5-af2c-49ed-b152-3dabe816e1be", "value": 639600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843126, "uuid": "281d2a34-9d8b-40f2-8fe7-ce05193179f2", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d737f52-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776843126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843126, "uuid": "3112fcdf-c9f5-4e1c-abe7-bbc91f487960", "comment": "Malware payload", "value": "e8d9277fd279da18666c283e55d44808", "object_relation": "md5", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843126, "uuid": "31d40045-ed42-43c1-8f4f-60e82d7d9b66", "comment": "Malware payload", "value": "b22f84c5292fea15b55c4b1cc8c8506c9da2e110f2a9c0a9daa902d8d5aa4f73", "object_relation": "sha256", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843126, "uuid": "8f92798d-3074-4b98-9813-aeed1a4ddbea", "value": "T196D43A3B51F9E900CD0BB278BB873977AC02B8B823B0E4D64E074639E9E577196941", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843126, "uuid": "f3fa5102-5c40-4f0a-9b71-986ffc191107", "value": "12288:/MxeOvxTmvn2TN9X4VWSWra0au4g0qE7moES0oTluWPx:/Mx1xTE8rajgZxoES0u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776843126, "uuid": "26aff3a4-462a-4dc9-8876-55bc1d1803aa", "value": 640560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843126, "uuid": "dc887f14-489c-4b5a-9c79-cad69d8aabd6", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "813603fe-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776843186, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843186, "uuid": "63679140-ad26-4cf5-a1b0-2d1dc3d46bcd", "comment": "Malware payload", "value": "ac6b52c07abca413c7b19fbd253f3841", "object_relation": "md5", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843186, "uuid": "ebc50391-8f4d-4fa2-bdc4-4f36859cf678", "comment": "Malware payload", "value": "d2b5fe15681ddc93be95034b71109d33fcfcc2bb7eb71df5cacb8d7f78726738", "object_relation": "sha256", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843186, "uuid": "461ca083-0b7d-466f-b3ff-937b57569324", "value": "T134E45B7B91686589DC9B72B46BC73AB7FC11BD393320D5D65E03032C9DF06369A282", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843186, "uuid": "147df853-3ee4-4020-ae4d-205242f45711", "value": "6144:rU7HX6JxtMMy/Oj174Kfiu7n0EZGSpomD6h/JPCBs5YNGj9TXao45uq:rULutW/Oj174KfiuL0Ipe/JaBs5WGdI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776843186, "uuid": "f48878eb-957d-4aa5-a2a7-74a47bb412ec", "value": 690528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843186, "uuid": "a45fef2a-e0c5-4973-90b2-c64a2837eefd", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f1d6332-3e1e-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776843666, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843666, "uuid": "8d353fe3-41bd-48a1-8e0d-a2a1249e4bbc", "comment": "Malware payload", "value": "b11084e6cb11b00a78cfc5d909f1270d", "object_relation": "md5", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843666, "uuid": "2314dabb-6c10-4834-9e0d-b7aacd74d67c", "comment": "Malware payload", "value": "ac09ab998bad811e567f250ae8e93ef189e62eea17ea630990f368446a944a8c", "object_relation": "sha256", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843666, "uuid": "af9bc351-a1f6-459b-ae2f-1e8c13c9dbbf", "value": "T14CE45B7B91686589DC9B72B46BC73AB7FC11BD393320D5D65E03032C9DF06369A282", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843666, "uuid": "2a3a03fa-73d9-4b1b-9e83-ca263841891f", "value": "6144:rU7HX6JxtMMy/Oj174Kfiu7n0EZGSpo9D6v/JPCBs5YNGj9TXaot5uS:rULutW/Oj174KfiuL0Ipp/JaBs5WGdp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776843666, "uuid": "1f142b29-a642-46d5-999a-0641b36e630d", "value": 690528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843666, "uuid": "059d4330-57c1-45ff-bacb-d6bb02375053", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a162093-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776843845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843845, "uuid": "c7935c09-4841-44dd-88bd-076c617234a5", "comment": "Malware payload", "value": "e4e98ae661997fd8c6596e8016b395ce", "object_relation": "md5", "Tag": [ { "name": "46-151-182-76", "colour": "#253b4c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843845, "uuid": "4fbf995d-2fe7-4910-8167-6872e5921371", "comment": "Malware payload", "value": "5fbbf4df96c3da6fb2de553e1c65ac550d30e81adc6f18a58d6e1e2040f6560f", "object_relation": "sha256", "Tag": [ { "name": "46-151-182-76", "colour": "#253b4c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843845, "uuid": "2af7f822-5656-47a5-affa-fc7bc6971e70", "value": "T19EE45B7B91686589DC9B72B46BC73AB7FC11BD393320D5D65E03032C9DF06369A282", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843845, "uuid": "e9d677db-246e-4ccc-9026-ace4a916608d", "value": "6144:rU7HX6JxtMMy/Oj174Kfiu7n0EZGSpovD6N/JPCBs5YNGj9TXaoK5u+:rULutW/Oj174KfiuL0Ip5/JaBs5WGd+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776843845, "uuid": "ff095899-cea9-42bf-ae0f-7c7b8618b368", "value": 690528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843845, "uuid": "072f301a-6b8c-45e2-a8b0-fa56fea9a2ac", "value": "application/x-mach-binary", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8c2e0101-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776844064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844064, "uuid": "692448da-c5db-4cc9-9d1f-9eadb52ddd38", "comment": "Malware payload", "value": "3c626102b2efd323bc5d859e84c72742", "object_relation": "md5", "Tag": [ { "name": "160-119-69-4", "colour": "#946e7d", "exportable": true, "hide_tag": false }, { "name": "45-95-147-178", "colour": "#a61377", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844064, "uuid": "0ea99b1f-cb10-4e19-956d-15b703565c92", "comment": "Malware payload", "value": "75d8e059111fd0289912b062631ed3a08e0701e6b0c6fca922730f2ddf3baa7a", "object_relation": "sha256", "Tag": [ { "name": "160-119-69-4", "colour": "#946e7d", "exportable": true, "hide_tag": false }, { "name": "45-95-147-178", "colour": "#a61377", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844064, "uuid": "7083ba9b-1583-4539-bea7-a168f783c104", "value": "T180B2EFF1F8ECA436369D853ABB9CA805A9CF7C2F4DAB7D2014575938411C71EA019B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844064, "uuid": "ac1bf1ac-4148-469a-889d-7a17d3be6a04", "value": "384:bVc3s1oisjsKG6qkSgjkjV/A4UAcGE3JNRhQuW5Q:QshUMkSgjkjVdUAcd3JN3N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776844064, "uuid": "828a4ad5-71a4-4238-aa4d-ba72d59acb12", "value": 23655, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844064, "uuid": "c5db1562-ae44-4102-87a0-92573ab52339", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fcbd2ac4-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776844253, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844253, "uuid": "8debc56d-1265-4443-af66-8e5eb39b3792", "comment": "Malware payload (Mirai)", "value": "838d34759a153f54daa5fba8ba8c9fc9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844253, "uuid": "87e520d5-6adc-4221-a316-cfb17d4e24be", "comment": "Malware payload (Mirai)", "value": "bab0dcfda381ca364b3b2d943e975c700cfca7e5a32ee8294e88c5e846ce758c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844253, "uuid": "0d17453b-66b9-4cf1-854f-5ab44769d027", "value": "T1E293E683FD01EFB7F40AA77A059348197230FFA60E921A72721738ABED361D51466F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844253, "uuid": "a2f075f0-6cf3-4912-aaa6-df16f2bf97d9", "value": "1536:tTzT5feu+h7JP38wGvT7rSyrQbR8kmOK06KQSHLuNNM1YHG6hv5gb:tTzkh7JPSTfSyrQbRzKxKPP2HGwv2b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776844253, "uuid": "ae51c6ba-d89b-474b-891f-7a1ae9a74f31", "value": 96068, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844253, "uuid": "92ab80c0-81a6-4e28-b9ab-4d9ce53c6bef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ec97264-3e20-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776844337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844337, "uuid": "3e59cce2-5cac-4a0d-8e69-b2d64f31b67b", "comment": "Malware payload", "value": "fbca612a6a6d93f2aba48dea7910969e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844337, "uuid": "1be3f216-e09e-4006-b173-ae984956a4bc", "comment": "Malware payload", "value": "7e526353d2dc55f5941c2eb6fd325c5ca79e34622cfdcd2c67e1cfa0263359c2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844337, "uuid": "3a14f240-cca6-4dc2-a327-cb7051d1f53d", "value": "T1ECA3C62B7B130E23C0C650B152E30632F9BADF5938BC4697B8A07D9D5F3998431567", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844337, "uuid": "33099711-d133-4c2e-977a-7e292e138f40", "value": "768:hey3p7/2C8Co/ECjHJYs3xucOMxf/1OGP5hz2lnY0FpZteFaheO+Nfb5VRzU2ew9:Hp7i/F3hu1Y01t+aqND5wetXlPB3tsLa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776844337, "uuid": "f75aa3b3-3784-4541-89d3-d60cfa0ef3bd", "value": 103268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844337, "uuid": "5e458b98-61cb-41ce-ab8c-09fc82623678", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db4d6d85-3e20-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776844626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844626, "uuid": "31e35fb3-4bff-4d55-8d67-5a8027a9298c", "comment": "Malware payload", "value": "147c8ba94bf2137560b2268b6550ef16", "object_relation": "md5", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844626, "uuid": "40446187-1b21-4699-8b15-858a231240f6", "comment": "Malware payload", "value": "868a626620230c65c0fe1833b54220db90333a498c81097f695584cac501ebf7", "object_relation": "sha256", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844626, "uuid": "c30833da-8fdb-4217-83e5-8be6ad125abe", "value": "T124E309DF1A799D2CCE606A677A106DC0AF1738938C17C568B34C502732A9E9F3617D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844626, "uuid": "3443dce2-3cdc-4070-93d3-70a2a26e5a3f", "value": "192:ugXc8m+N7ZpkcGMOCgpTvEHOJEtnM4ZO7B:/s/+Tu1wuJEO4QB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776844626, "uuid": "c4a9521e-405c-4f42-b1ce-2696fa2c3d77", "value": 153005, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844626, "uuid": "93f7ec5f-7ff3-448b-abc1-27923574eb72", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd59a275-3e20-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776844629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844629, "uuid": "73ec91e0-c680-4a05-be34-a55c15e4c57b", "comment": "Malware payload", "value": "68d5e19da108b5542daa7226e11d80eb", "object_relation": "md5", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844629, "uuid": "fb942f50-e720-4cd8-9e64-1de803fcae85", "comment": "Malware payload", "value": "5cbdf43b0eeb6b7506141c18457937fc1e2e847b3457c30b4e89a42376d7c35c", "object_relation": "sha256", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844629, "uuid": "522f823d-edda-40aa-830f-e348363e915f", "value": "T140D4BFB95394AC9F0F1D0E66F50C174A1C6948C7E6BCC2B87A82B4F845661A48FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844629, "uuid": "7b69010f-9847-4e52-a670-ed1c05a862a0", "value": "12288:CCfYJ8cdHKMkerLQSK4UQkEF++c+3gv8H7lZEmW1Xlxb:GSYHKfELQSKMkU++c+wiJZEmW9Xb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776844629, "uuid": "2a9a6b00-b60c-4247-9a3e-c0dba1d98806", "value": 641024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844629, "uuid": "ae6e5746-63fb-48f0-9460-3047bba0ada0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3be7915e-3de4-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776844631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844631, "uuid": "bc308ae1-0b04-4f39-8ed0-7dc11223609a", "comment": "Malware payload", "value": "c8e1a732f90c48b014bfbd246620c867", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844631, "uuid": "e1e8274d-7b93-447e-a4c2-3bc5717020b5", "comment": "Malware payload", "value": "ac1e9e835a16b8827b3feb6dd9202acb1349a3b87fe3066b4954f37e659bd48b", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844631, "uuid": "cd7f4694-acc6-4d14-8080-4315d18401d1", "value": "T131169E1BBDB95C69C09AF13088737605F664B8005B2317C71AB0F6242F7B7E19AF9B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844631, "uuid": "71e5f133-21ce-4250-9ce9-74f47493c8fa", "value": "df8b2eb7f4c9968c81852769071111b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844631, "uuid": "e465309b-3800-440d-a17e-2f595508b510", "value": "49152:F4UEZKvl+N5ThczGFsJHIblBjSEG6TmZphtXbeyjyTQc69:F4YKFZBie6T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776844631, "uuid": "71ca9cfc-dc34-43e5-ad8b-180273763f2c", "value": 4340200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844631, "uuid": "454bf7a7-a8c5-4804-9b23-0741fdfd6863", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ff70224d-3e20-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776844687, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844687, "uuid": "03fe3d47-0392-4351-898d-e5ca7b9b7c61", "comment": "Malware payload", "value": "3239f9859f92d1af9aaba7c84d577279", "object_relation": "md5", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844687, "uuid": "f569e226-c224-4981-9834-c2faf5001fc8", "comment": "Malware payload", "value": "e3070f4d424f6f12029e0d4eff218395037b1d082bfdc8e7301386d4bfad051b", "object_relation": "sha256", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844687, "uuid": "b6092ea9-219e-4555-bfe1-641f816d9ea1", "value": "T107E33BDF1A799D2CCE50666B7A106DC0AF1738A38C17C568B34C502732A9E9F3617D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844687, "uuid": "840fcec9-c22d-4975-b6db-c9881cc9c888", "value": "192:ggXcCm+NvLCQRVNQNfg2MnSUGWcEac8QMTFpO6wGAEaC4ZO7L:Zs9+pLCQRVNQXbQMZpO6wLrC4QL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776844687, "uuid": "c52443b4-f861-4bcc-95d7-855112904ce0", "value": 144596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844687, "uuid": "4fead1df-9b92-4c68-9089-07edfa506ef0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e4060b0-3e21-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776844819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844819, "uuid": "09b4c617-2390-4f5e-86e3-e0f7b4ffdba8", "comment": "Malware payload (Gafgyt)", "value": "446a7ebe298e0121f04c05711a110313", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844819, "uuid": "76208f5b-8948-4c1d-b382-758bafaadfcf", "comment": "Malware payload (Gafgyt)", "value": "4d632fc779db3041cfa5061eb43f357bc7253a3eecbb3640238e5be8d03bbb94", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844819, "uuid": "54a6e82b-ca8c-498e-9b2a-481a9d53889d", "value": "T151F2F1D2D34C7832CA223C31C57BCB4211EA2D1169AA30F6B59866FEF896513ACF44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844819, "uuid": "1ce06e3e-09e6-4027-a04c-2220720a2bed", "value": "768:3r0I4emOitqNSet3+bAYs+UDpOGLEcujVzcYmvPtRfkjFbJMtEQ4Xk1SlSWUZ3US:3gumOPset3+crVlGVzcRlFk1JMKQwk1H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776844819, "uuid": "0c063439-4301-463a-bdab-630eccee8299", "value": 37556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844819, "uuid": "2b55e8b3-fe3e-48c9-b6a6-a11853d453cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e076d8d1-f1ea-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1776844927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844927, "uuid": "27fe3db7-a2ca-4d8d-965f-8b3e75fd5fd7", "comment": "Malware payload", "value": "b1b4ee0cb3ef800bb5a644fd5c67e4b4", "object_relation": "md5", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844927, "uuid": "a9abd41a-d3a7-49f1-82ad-fb1c5f6826f7", "comment": "Malware payload", "value": "b88c30b2ac4f975f97ae1ef684a0a1735ba2d5d85e47decabd89b1c6c78740b6", "object_relation": "sha256", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844927, "uuid": "f0f325fc-a323-4062-bcb5-1e7dccf8205f", "value": "T1B4A39351B8D16095CAFCCE25B2EEED348971DD304992F945BDB0E9192C2E1C2FF268", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844927, "uuid": "3d14aeb6-8cc0-4c81-9345-05d2543f400e", "value": "1536:fbPiyl+qD9ZMkojbmAvvcHEIBqLjb1ty2gLX/fatkm/PMtIuiV:zPxl+qDbMkWzvNMk+atk0ktI1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776844927, "uuid": "b8c577e4-1ced-41e8-9f20-8f4899a1bc76", "value": 99869, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844927, "uuid": "b878bacb-5990-4c2d-a3be-b7300366ab68", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0689fd8-3e21-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776845091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845091, "uuid": "04eeafc9-068b-48d9-8ced-c8d525162a55", "comment": "Malware payload", "value": "2ae92350b1273b52e3a0e8e63e30dc80", "object_relation": "md5", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845091, "uuid": "66406d47-0711-4bb1-8fc0-fc3c9edad44c", "comment": "Malware payload", "value": "f1555a6142950f493a2d556d225f437dfefceceacd5b5de7c107eccc2ca66dbc", "object_relation": "sha256", "Tag": [ { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845091, "uuid": "986e8221-b364-4469-a04c-3b23d97a121a", "value": "T1B64144CB2122BC36BB4799B6DB9BF3CD305234D3D130A698F08E74526FAD21436857", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845091, "uuid": "5ec698cb-cb05-40d3-9152-ece06475af6c", "value": "48:DQsHpNYa82C96GNpYMzvmgT1kC/B10Cs/CVbLuH5KS1v75A/wPB13xxaK5nY1p:DHHpND8t4qWi+WWQUB/CxLgKK75Ae3Ty", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776845091, "uuid": "a3a5d7e1-b614-4daf-b9b9-0dbe22d8cc20", "value": 2141, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845091, "uuid": "b7b1b6a0-ce4b-4297-bd9f-45beccc46820", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776845831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "d547ac46-c61f-4189-8834-0267b3e381f7", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "3ff0eb5b-08cb-4472-92cf-1bc7ed193a6c", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845831, "uuid": "e9e989b9-bc02-4096-9274-213245445d1e", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845831, "uuid": "646b08da-07f7-433a-a87f-aa50bcd2ed79", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776845831, "uuid": "b98a086c-af90-4839-8ac4-8c3b8c3df3e8", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "195fae0e-3e25-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776846448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846448, "uuid": "9984c980-fca8-45a6-8044-a29e030df989", "comment": "Malware payload (Gafgyt)", "value": "00f39c7c2af999e59209fd73825c0a33", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846448, "uuid": "e895f2ee-e776-485d-9a8f-0e967d7b99c6", "comment": "Malware payload (Gafgyt)", "value": "0f70443956f8340ec3a31ca44c34619a2ea1db1b07b68c06c5f4e72ae8581df8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846448, "uuid": "0592951a-de88-4c24-bed8-02420856618b", "value": "T1A2F2E195822E8D62C42D66BB1A3BFA0E9524E30C5F388E9A7D9424324DF1DF5461F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846448, "uuid": "3135ca4c-3b0d-4e58-a453-84034048ac1b", "value": "768:exanFcsYB6qPln6z4LMBFmcY0TbAnbcuyD7UWyqcg:RcB6m6z4LoTTsnouy8Nqcg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776846448, "uuid": "cfcbd921-527e-4916-9dfb-7671667e72e9", "value": 36852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846448, "uuid": "965740a4-32b6-4cea-83bb-c5f5e1887239", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b49232f-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload (RustDesk)", "timestamp": 1776846854, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846854, "uuid": "f969e3c2-85f9-4c5f-9a47-c2f38f00d720", "comment": "Malware payload (RustDesk)", "value": "758264fcf5413233d4a683d667fcd05c", "object_relation": "md5", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RustDesk", "colour": "#d474e9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846854, "uuid": "d519cab4-341d-4847-add9-5c42c3f4442f", "comment": "Malware payload (RustDesk)", "value": "950b740b364c7a827be3ca82b77533e419097ac56a5937ad637b3d6177e6f9d9", "object_relation": "sha256", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RustDesk", "colour": "#d474e9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846854, "uuid": "2c8fb646-3bfd-4059-8ee2-03e100d59331", "value": "T12A473306F155183AE86A8430991596B7A7B43CD907316EBF63D439293F3FEE06B393", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846854, "uuid": "42de5905-e952-4566-8065-f4357b1735c1", "value": "a77c7067284e6628d64c7a38450f7544", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846854, "uuid": "526d4dde-cbe9-4e60-ba3f-f8791f0c3df9", "value": "786432:79nR4xL02pg4RzodKUtttLxPicrvlu6zSZ8OS:79nR4xLFpdzodtvtL5iadu6zsR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776846854, "uuid": "9406bbf8-f2f8-4a52-add4-00be450200e3", "value": 26367488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846854, "uuid": "afcff057-5497-4522-8d35-6e6f07e2ee94", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d9c3e23-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776846858, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846858, "uuid": "d98b852a-ae63-459e-85ec-44d9ca271c61", "comment": "Malware payload", "value": "6089bdb3627c5b3d8175f4cf76be46e0", "object_relation": "md5", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846858, "uuid": "42297975-6d96-4135-ae67-d4f868e86689", "comment": "Malware payload", "value": "f1b5e92a8287d67231ddf169b38a16083f96c5e1726d99308d2f32e8ea4ab43f", "object_relation": "sha256", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846858, "uuid": "4573bd6b-0d62-46dc-a67f-fb3f6bda97e6", "value": "T1A8E633E28E112035C276EBF33A46AD7D137FB67720B87795332DB80AD98A451137D8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846858, "uuid": "bec86e73-4761-4b4c-8211-dd8f1a8a2940", "value": "a413ffcb413e398d1f798a0daa527855", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846858, "uuid": "c0e8e5e5-8c69-40d0-b0d3-be59ffa7cd3c", "value": "196608:igtptjGKZ+fq0sKYu/PaQrBuN1BbWTQscK2pUZMAbUEO3oDDJf6Wv/VJ8KnWWo39:zpI8QrUN1QgUSAoEO3o3Jx/VJWPw4y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776846858, "uuid": "27a342fd-c276-4015-9582-5f9c8f6a2bf0", "value": 14971924, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846858, "uuid": "ccd44619-6889-4b8e-8a55-24209296e6a8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1091e863-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776846863, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846863, "uuid": "0287e7e0-8d14-4abe-8536-7db1bb8af13d", "comment": "Malware payload", "value": "d7d8d872de4ce7df5592d36c7bd73820", "object_relation": "md5", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846863, "uuid": "f4cd60f7-a742-42b5-ba78-b8c01e6c265c", "comment": "Malware payload", "value": "8f291b427735e0f54a4fced96554387f1fe7b4d8fcf41226f821e7865456623a", "object_relation": "sha256", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846863, "uuid": "1cd785f7-178e-429b-99b4-ef3f6bb125fb", "value": "T11C47331BB3170C3DE41689B45A0A917796B13CAD1B315AEF46D436143F3FAE0293AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846863, "uuid": "3e8ef670-7333-43aa-b417-8cf60ac7bdb5", "value": "a77c7067284e6628d64c7a38450f7544", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846863, "uuid": "ba2fc524-f8e4-42ab-ae7a-4cee27863850", "value": "786432:Q9nR4xL1IluXcnHAjET60mwmO7Z8OIF7E/EFEJE:Q9nR4xL1oOWIET60IuRI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776846863, "uuid": "abc8f67b-b626-40d8-8242-cda29ace80fb", "value": 26357248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846863, "uuid": "2be1a8ac-77de-4969-acc7-b46d8b2cb3e6", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f781efc-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776846888, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846888, "uuid": "e68aff5b-6748-4377-99b5-32ea3d520ba5", "comment": "Malware payload", "value": "265344b26341449d2bb33ccffb165a12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846888, "uuid": "becf0cb0-a98f-4027-b322-3cf09d2bb6f4", "comment": "Malware payload", "value": "0e899af91c628891d209be429a246e847f27fe59b5ae6e36f701392fb4147ef7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846888, "uuid": "d6093c0b-8950-4b64-8a50-2b69921358cb", "value": "T1D113F025EA8E2C41C22D5E3D8C6E23266E2400E0E36E87DE27085F505F07E5EF56D8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846888, "uuid": "ea07c46e-4ef9-4661-8ee8-30dd5b715d0d", "value": "768:4SWyDQUS72wGcBA8oOqVX4jFh46NMhEpPIE1tZyA00qHvMDNAM955sXnWRy90Bn:4SWuS7BXKOV2ajT0ZY75mAn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776846888, "uuid": "fc5f5018-7697-4763-9c65-117682424604", "value": 41552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846888, "uuid": "b5761150-19ca-4b2c-83d4-b034d5d2a75e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "56973b6c-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776846980, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846980, "uuid": "029ecc67-8474-41fe-b450-df961d6eacbb", "comment": "Malware payload", "value": "0f0b5d81ce14acdaf594b3ff64f596cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846980, "uuid": "01f4bb17-41b6-49ed-be6c-896dbb42e407", "comment": "Malware payload", "value": "6388fba119c828a2fb8d7c58038b8f703d1e80b39615a8f1e7cfe0013eca9102", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846980, "uuid": "e394022c-8f12-4b83-9011-d55b25e4ff6d", "value": "T1A9F2F13BA04987B8D19F9B700A9983F273C29FD4665D81F093887AE5F391F9366404", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846980, "uuid": "1057c18e-7dbf-42d0-8fc4-e62078a64179", "value": "768:6MsnNx3Jsohdn7L2EvK6y+elqTbMcgfXWCHbtsKScJL4uVcqgw02NWXh:6MsNHvxyObhgOCpnF4u+qgw06WXh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776846980, "uuid": "35b7ca77-9343-4db7-81e4-0a7a77257648", "value": 36828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846980, "uuid": "2ea63bf6-6f88-44a7-977d-1b92be8bd9c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd7b27a1-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776847153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847153, "uuid": "32804386-c628-4ab0-928b-2b95837fdc81", "comment": "Malware payload", "value": "7b2228f4c0b9a10cfcdb2c8103f1c153", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847153, "uuid": "2f0f8754-d425-469e-9576-f10f1426a15b", "comment": "Malware payload", "value": "155f6feb8c51630533f53c9123cdb94cdf1c45c1e4e6c1e5db5f94deeca52b67", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "CountLoader", "colour": "#1bbfa8", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "ua-mshta", "colour": "#d1fdbf", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847153, "uuid": "a255ffe0-b19f-4002-8390-be8d83ebcb77", "value": "T17A042C4C4D9F48E41B437C64508B694AEF789B4B470FDAD0BB6DDEA03F0596E40EA2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847153, "uuid": "ef8b7fed-ea6e-457b-a265-fc42e533d4a5", "value": "1536:x3jT46Qyd7UrVVM5NNhBz5VvZp7gdZRdKWGiO0/Me+QKfTuAFOQ1OQqt:xTxycQKfTuAMt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776847153, "uuid": "5a4683b3-a4ca-4e76-9bc2-c9bff78fd4ee", "value": 174780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847153, "uuid": "a64b028b-3415-434a-9c95-0c5351d8c353", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e603b45-3e27-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776847342, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847342, "uuid": "de54ce4d-fdb2-4db1-9ebb-32699ceefda3", "comment": "Malware payload", "value": "4271d15eaf145350189f221f6d0210a5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847342, "uuid": "a13360c5-176d-4cee-aa39-ad31c4205fbf", "comment": "Malware payload", "value": "6f3fc8def94daf3a69c6fe855b1425252410aecf6de035b6098f3536af8e1173", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847342, "uuid": "caef290a-f130-4333-98ab-49dcfaa4f9e8", "value": "T11E03E1AB42B7ED7CD83AADBADA815248AE70F537C9210F6328E4305ADC427541C65D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847342, "uuid": "7a2d59a2-b84f-4aff-9bf6-46b364dfc76a", "value": "768:wqjI+QU11QMcTRdCsC7ERo8FdIonEzws8wIk8Uw/Nsv9sPr:u1dC8o8FOoqwvwI1f/iFur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776847342, "uuid": "4c0cce00-9efb-4ff4-8763-6f7458679da7", "value": 39844, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847342, "uuid": "cbf3093c-16b6-486a-bb55-c103424173aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43993c72-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776847807, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847807, "uuid": "6776f2ae-177e-4c2a-82ee-57ecf5d2ba2a", "comment": "Malware payload (Mirai)", "value": "19975cd129fa660713ec621c24ef2fb1", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847807, "uuid": "15a6976d-079c-4c4c-903d-a466e0d40cf8", "comment": "Malware payload (Mirai)", "value": "2ea0d31c3c95a87eb483e6444e1a3d8a9fefcbad95ce3375370ff4b6dccc87d8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847807, "uuid": "fd51c4e6-f6e7-4a6d-847f-bc2906a73d5d", "value": "T1D57301AA23E8F766F62717F260732AC03B5528D8500F8663B519798DC5DE142244BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847807, "uuid": "9862ac59-7546-419d-b8a5-02778840bac4", "value": "1536:7t/53cJDRHOOjK48HtwaY9PELOha/ny41DAAE9e5SZ9Yi9LAZBiodG:pxgRuOjKxwaY9PaOgyIDAAEeCmBikG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776847807, "uuid": "fd819315-ea13-458c-ab6d-0410777847d9", "value": 77580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847807, "uuid": "e5b3b3b5-22e8-4e85-9369-c25f5b7c6487", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "43d84bd3-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776847808, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847808, "uuid": "2fa3c689-cb41-4bfc-a52a-1b1babe4193d", "comment": "Malware payload (Mirai)", "value": "352795b70fd3a9a00ea2394f961afb4b", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847808, "uuid": "832526c9-8a9e-44f3-8476-b4e324122f0f", "comment": "Malware payload (Mirai)", "value": "e44fe4c5cd112d2fed6d1c20bf9dc4a8d3e36b534d6dc6cd42ffd7a9bb550e20", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847808, "uuid": "b021f51f-d316-42e7-86a6-960b10aa5843", "value": "T190F054E6E1311B838405BF0DF466C6E4A162D6CD11875B9C6EE8706F867C8207911A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847808, "uuid": "047922af-78ba-46bd-8384-dfeedf31053b", "value": "12:EsrMVksQspbXsrNIh5sGjs7cKLKmvXsWeU:EsrDsQspTsrNIfrs7XKuXsW1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776847808, "uuid": "fb785667-0296-4bbf-bb55-3869207441b3", "value": 501, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847808, "uuid": "d6fd29ec-b794-4862-ba09-205f57bf0875", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcfae515-3837-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1776847875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847875, "uuid": "aa7093a5-5028-419e-b5fa-af78e6d9408e", "comment": "Malware payload", "value": "c3c561c20e48169f4906c6b0b135984b", "object_relation": "md5", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847875, "uuid": "708149db-eeb8-478d-8047-7fb9da99ab56", "comment": "Malware payload", "value": "b914abc696286a639a847d2e3a4a36ff682f30a87b08c4ffc61f2e0cf5e7ec5f", "object_relation": "sha256", "Tag": [ { "name": "94.156.67.161", "colour": "#685f85", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "info.zip", "colour": "#160766", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "xmrig", "colour": "#7c7fa9", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847875, "uuid": "8209195f-ba31-4d95-a837-0e5f2b313c2a", "value": "T1ABF53329C35BA51C444DD111B88E299A937D8D177E1E17314E43336CFE378AE3E8E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847875, "uuid": "f7339596-604f-4713-a7c3-7e2e265c52bd", "value": "98304:SyrPvG3UNpYqQLpXhHHeanDebmPL+okjWa1luc:SyrPO3UDsdXp+z8+FWy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776847875, "uuid": "e27e51c6-c3f9-4b20-8de4-798a6ab53c10", "value": 3526945, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847875, "uuid": "7e00d30c-c3e7-4b18-85a3-88f9a3d83758", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1fe9d40-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload (ConnectBack)", "timestamp": 1776848046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848046, "uuid": "b4c2c0d8-92fa-4ee7-86bd-57cab32fbc6b", "comment": "Malware payload (ConnectBack)", "value": "29e9ef27bcd8e56f0007533d1f8b6cbd", "object_relation": "md5", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "ConnectBack", "colour": "#4be568", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848046, "uuid": "58fabed7-d8dd-4ff1-bf87-fc504c7b9404", "comment": "Malware payload (ConnectBack)", "value": "7e8535101461b828c2d12888ab01fe2ead504d19c2e14c141ef029346bfe86d5", "object_relation": "sha256", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "ConnectBack", "colour": "#4be568", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848046, "uuid": "d7df823b-58ba-4485-aafb-0119755b2065", "value": "T12AD080330F0F80DADAD4133F6574595CD77F89B65749623108A0DC010C496045F62C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848046, "uuid": "513a855d-5920-4cb1-bf2b-ddd0e4a87347", "value": "6:BnX//In8/r1uBxHocmTr8D9Q3RQdygg5XJYD:BvwncrAH3mHSq532D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848046, "uuid": "7f0fdc7b-a100-4b8a-aae3-77968d1863a4", "value": 250, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848046, "uuid": "3d396473-3237-427f-9774-14f9a49e465f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d213b64d-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776848046, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848046, "uuid": "66745458-2791-4e6a-9705-683c48c35598", "comment": "Malware payload", "value": "e10c3a204370d631ce860a23425e760c", "object_relation": "md5", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848046, "uuid": "84a8f7f3-9eeb-485b-aa0e-9348ea660ae0", "comment": "Malware payload", "value": "d80c838538dab9d70b886083f8e165c91b3994650a0ab9dcd37098e98ec7440a", "object_relation": "sha256", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848046, "uuid": "cbdef6b3-edaa-406d-95ed-083e2722d73c", "value": "T1F1518453B8A48939E811077209630DD699B29631E2BF5B0FF34C293CAF71583E1423", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848046, "uuid": "c8bbfa84-5993-4591-8475-460235f10dfe", "value": "97c6f7bdf42991e9082f7210821d1a51", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848046, "uuid": "be00884a-2124-4f4d-938b-7916571dab7e", "value": "48:0HPpxNrqHK1FsP4FCJdJ8GnjhEUu4Clj+2364Q:ux5/sP4FCjhnlCli2364", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848046, "uuid": "c6f50494-5233-482e-adea-34b3e18eba54", "value": 3072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848046, "uuid": "8f408d12-f5a9-4f4e-8fc5-8acc725173d1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d22904ab-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776848047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848047, "uuid": "334e6ece-494e-4dec-ae31-4d31076fb1e2", "comment": "Malware payload", "value": "d0173bbf41329a6ece837b0bab4c7a5d", "object_relation": "md5", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848047, "uuid": "5c3b9eda-ff5d-42ea-9ac9-b0bd7ddfe5b7", "comment": "Malware payload", "value": "8b5a24a04aa630c9b886ff384fea25727e44f111544b642a0e7298cdc13a07b5", "object_relation": "sha256", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848047, "uuid": "f571fc29-5ec0-4e65-bf34-4c56cfa2dd9c", "value": "T1B073BF47E9C81462C162217E57313EBAAA74F1BA3605C2EE7A4CDDF1DFC19B062163", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848047, "uuid": "8751b857-e5e4-4793-90bb-e6eb76b54b6f", "value": "fb6bd8ebf4e6421b53c55dfe7d3c43af", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848047, "uuid": "726bbb21-a166-409d-86bc-ae877da285e5", "value": "1536:I5K9dFRKwgNUxos7xacNVpAn/sbof2RUDMb+KR0Nc8QsJq39:HtKsZ78cNgnwofdDe0Nc8QsC9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848047, "uuid": "2bb84796-b6df-4002-ae4e-00af0c1f9749", "value": 73802, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848047, "uuid": "53602abf-8f20-46a7-8ca7-7a41656cf7e5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d46c9120-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776848050, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848050, "uuid": "9ee97d24-52b3-4442-8b11-5d8d958b4ec7", "comment": "Malware payload", "value": "db89e8f2590ae683553d05ef76ae60f8", "object_relation": "md5", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848050, "uuid": "c813ea79-08bc-4639-a18a-9ec73ecddfb9", "comment": "Malware payload", "value": "b607a4d284363ec9eaadc85a2627a72aba9527c84787653ade10dd60435bda4e", "object_relation": "sha256", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848050, "uuid": "cbaa2c1f-a2ba-4f9f-b865-5cd6d6cfb9be", "value": "T18E81A4B24E733D0AA7920C8498DC30C68DAC278B2B246285EDCCA2760561900DDF99", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848050, "uuid": "66cb7d41-2ac2-4e84-b6f6-9a31c1a57424", "value": "48:xV6DCb35M+EiBgO0V7ZtwbipcWnlsaPoengQFe0pgSFy88hbh:GDU35MtiN0V7Ztuip8CoXce0p/78hbh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848050, "uuid": "6decfb31-7348-424a-b085-6bcb9dd30d64", "value": 4096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848050, "uuid": "bb6a63d2-c6fd-4e5f-bc82-838ac87acb17", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac012c56-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "b51c2919-abbf-4ed1-80a7-f10902b99a85", "comment": "Malware payload (Mirai)", "value": "03d322c0a2399136cb7c77a38499772a", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "0d9ba036-6722-4e67-ad69-619c3a1f179a", "comment": "Malware payload (Mirai)", "value": "7ef770d5ca72990e97b8c1d1d69b635b61675fd1430a2e298212d8d98b965e44", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "f87cb447-3571-4dc5-9f79-7647425e90ec", "value": "T1172302B9FA8084D2F730F43111750A1AE70F7FAAA121ECDBC06D2A77A4344BA6155E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "29d16718-0722-4a44-b835-223a24d9d238", "value": "768:8NkGBVrBtliBtG7pcv3HJe2/FYXmeNejXHMbQCx1GhsXLiNN+E3gQv2lVVy/Mn1I:8NrrBniBteCPDFYWVjsvjX0HgJVyiT96", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "b7fe56d6-a657-41f8-8963-0db46d9f4307", "value": 48360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "2718e4b1-2b46-4e97-9436-a847524c3db6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac0828b6-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "382e7481-fa1d-4776-ab95-526a7a21b85c", "comment": "Malware payload (Mirai)", "value": "8a9fa9f2149898c57cd10448ee13c236", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "e2d2ee29-b911-4514-b76e-80d6ebc88d35", "comment": "Malware payload (Mirai)", "value": "6d77ca7d7cf62c759890a816a831d1a5abe6c1e0efd2f57f0fb498278ff808ba", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "19ab20c2-1c6d-4a85-bda1-49ed88d3633d", "value": "T19303F11225CC425BDC4DB23D035D1ADFA9B02E621E97FF5AB9880DB98A352A096F4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "ab47b99f-9871-45db-b3f5-9ebe5b4b6fd0", "value": "768:x2kfZ/bHf9x73X4LRk5OxAes9N0tG+QSMhj3az+363yooJKyZk+j1If3IXhj:xnZbHXY2oxAt2qhhLKkZrcIfss", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "4a285d79-8f1d-41c1-9735-fc8fd57b5170", "value": 40444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "dd06639c-07b6-4ce9-bec0-44552e607ceb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac08a7c8-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "f3c1462b-a7b6-4832-9306-11f21127f3eb", "comment": "Malware payload (Mirai)", "value": "fba6b785b5148befb8606420bd2b290e", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "0ab81fa8-ef1d-4791-9b5f-7879baccb9fa", "comment": "Malware payload (Mirai)", "value": "0b2998c06a58ece81ec8303ab81f7ae61fd74a1d7639e09e9742a1cb90528580", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "324ff028-48fc-461f-807d-3b70004f38a8", "value": "T19723F120E0215A2EA1710CFF15B565B7B315EB78ADF8708F3B6674A34D26E4EF2A18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "3816942d-bb15-46b4-ae78-304a73c0dc7a", "value": "768:rvIaeg11UR7jw33sixFm8ja5ZQkp4SNQC/WOofcMU3HgLjhfSuXDothGndR5:TUE3si3Zja2SNB+7HU3qhqrcdR5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "eaa8b205-8ef5-4112-8c9c-1f6fca5d9d95", "value": 46748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "280356d5-d7d4-4911-868e-3694917140c7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac09e3bd-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "dfe78009-3dfc-4c10-b0fb-243606db3dc1", "comment": "Malware payload (Mirai)", "value": "65a38ad80462b24b35eb1237c021c1a8", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "31c66662-2390-4c68-9a49-af4ba4694fef", "comment": "Malware payload (Mirai)", "value": "2e42d976a86c2f79bda5f19fcf8335c3c29f5c7e712299bce36d429a4a2c6243", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "b69d71f0-b652-4719-af15-2bb046343cec", "value": "T1222301CF8B5CE27BD242357ECB994976D103A84BF243F6282CE07B057D28009A66DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "748a533a-4150-40dd-9498-7b3fd6d46e8b", "value": "1536:yI/naMIdNTH3gWf+DWfRSzxcFlxyCyqKZ95U:yVb3P+DYgccCyrv5U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "063e9fa1-025f-47c4-a433-8dd195ba3807", "value": 49740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "dd263c30-e1de-4001-af0f-351300d69a54", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac0e1fda-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "2d53d9d7-fbba-48c0-aff2-cf98fb6be927", "comment": "Malware payload (Mirai)", "value": "c4727d81f88fc96a975e879cbfc7d16c", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "0b09237a-ca3e-4f78-8abd-154af0fa7c89", "comment": "Malware payload (Mirai)", "value": "468fcaec13b79d9fd66df987af117b6c7ff3a9a68ebc2886b9a4768f0ce752ec", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "273cb8fa-faed-433f-82a8-5f211f9a6040", "value": "T1DF9318C6F401DC7DF80FDABB4463690EB631E2611A831B266757BE53AD321E05927F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "a4c6a21b-8eb9-4775-9fb5-f236bafdc0c9", "value": "1536:6sdLEbXJld3puE6tRknqnDPwK7wjkoLFWSKZRPD8bAjaZkH5S2gk0zjX5R2RGCJZ:6buHt4qnDPwKcwSKZpz2OS9kqSGCJjGA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "101593fe-7a75-41a5-9b55-b2451d39a915", "value": 96740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "f5483d58-7477-4b31-980e-9f8daf886731", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac11caa0-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "deca303f-57bf-4cec-8289-e58b8023a947", "comment": "Malware payload (Mirai)", "value": "22f94584a3e46ecfe93910bede6574f8", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "728a2b1d-7a2d-474a-9c56-e73052e23c71", "comment": "Malware payload (Mirai)", "value": "7defbf222c8557ebf4d767efbb0a1682ae17127e282299ed2464f9b767cc4a55", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "9901da7b-741f-40ee-9139-d6dc7bdd0573", "value": "T1503301368A9617D4C02E06313F4B87DD7B68CFF06191E216962489448D6F1BB5DAEE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "e933ad6c-eb06-4dc0-a4a6-123a560f23f5", "value": "1536:INRtXYi7iE3Vrzgmfv0IrqFWEWnyrH6DRoIRzE9nDO:+r7L1cmX0DF5b6DR/RzEQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "ac2d32f9-d0f9-4029-a9f1-75b6e53ccc0d", "value": 50304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "1c4f6ba9-9e68-44ce-937b-232cc147484c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac17ed67-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "780e3f0c-9f35-4a2a-bd6b-7e2901dc83f8", "comment": "Malware payload (Mirai)", "value": "3fcf3ca989b8436ab018ace6a868b0da", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "f3f4e489-b87b-42cc-aa9a-64870ca87551", "comment": "Malware payload (Mirai)", "value": "4c2df1810cdb3aa407dbae07ed14213628b303d7bf487418e51924c3760b47eb", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "461bbcd8-f8a9-48c0-819c-82ba107bf814", "value": "T1CA13F25172C7EDA7C9D4E037826E342B72A4E523BB97FE813AF06751C2321A4E3661", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "0b2e37d0-7680-45ac-99c7-cd031ef45d2a", "value": "768:n3XFQh9sCCqwPUAudPwZD+Rfz1wRgEW8YDlmlKNzZb4/dXly0G:nnFw9sCQ9kaE71weEWPlmIxy/dVy5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "92947c16-e4c7-4683-aa2b-0678497e4c83", "value": 42768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "7349e6ee-a97b-4c88-93ce-9335e9eecf4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac1ca188-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "590d7be3-1e0c-47fd-9a39-9584c9246143", "comment": "Malware payload (Mirai)", "value": "a01774fd869d5779cb69d30b532b29b8", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "d112df4b-eda9-482e-b179-f3776c523a32", "comment": "Malware payload (Mirai)", "value": "79bd145c01a073e5a7a1bb1ccad1c73ec5f0c75756110269d67a2a54ece1ef26", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "4996822b-f847-4b3d-9dfb-73201246e942", "value": "T13E935B22B539193BC4E4947622F35326F1F6438A14A88B2E7E710E8EBF156D0364B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "ae2f4d15-2720-428b-85d4-49784b5feab7", "value": "1536:DCTLZ0J9dF+/EqR9oShcUvytX5Ym5ngP5gYtGGJ:2yi+0FaB5YOgAGJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "fa999038-9c3d-459a-b2bf-0b7d5a3699b7", "value": 91984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "aa74dff2-b228-4da4-8641-5e5814788e00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac1cab5f-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "9f4a0254-ceed-43f2-9e28-169377948fbb", "comment": "Malware payload (Mirai)", "value": "4668d0075c6c748791a9a03081f5e6ad", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "b2eed9c0-25ca-43de-98ec-787d15797752", "comment": "Malware payload (Mirai)", "value": "c377615f57f295e64a8240af54e6c607e1061028e8e0e5cce6642344d5483012", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "083e0b28-880a-40e0-865a-60ff950c669a", "value": "T1DB13029C65B7CE6ED8F35231A2F805DE4DF1B9775D1A941237DC26C60FFB11600128", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "25dbe905-a5e1-4c70-ace8-a7cea6b65e24", "value": "768:WHQa5QDovTv4hl6NvNeh43agxtACwt7UVjp0DgG2jnIqGV5q2IysDr:pa5ooLvUl61N3y3piFDIDJIyU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "2f99c841-3cb3-4706-ab4d-a729a2d934e5", "value": 42096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "5a452ee0-2979-4084-b7e1-66a279c6825a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac204b16-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "e31ce565-65a7-4055-a7a3-38985d89ffff", "comment": "Malware payload (Mirai)", "value": "4fa071c7fba5f2a704a049b224ed2ba0", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "8a68d776-c1d4-4da2-a169-3a5a39a6049d", "comment": "Malware payload (Mirai)", "value": "a5036e7785aa6bd235b1f17a5cf9b28b9943a2d7ca7d3b86935abecae4e5dce4", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "538740fd-6805-4b07-b4c4-42900f49884d", "value": "T1DE739D23C8AA1998C25C42B8B170FF3A6773D51056536FF6059ACA7AA047EDCF8093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "4ba20590-5091-417a-9398-b379dab7bd89", "value": "1536:0/K/lVA7lvTwpyo+gKoJ/U74svhQC96I9hIXm:0i9VUBwpyo+noylvhQNGaXm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "e4cfaa23-1864-46b6-959a-227dcddef004", "value": 80380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "adfe2251-b763-4644-b315-227488f915f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac2331ab-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "499e32d8-5422-4fc4-98a2-11b1feba0c52", "comment": "Malware payload (Mirai)", "value": "9753a668cbdd16ae64ddc5d13a9cbfe3", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "22b13b1d-f425-4568-a4c7-23b5dc880a4d", "comment": "Malware payload (Mirai)", "value": "88220667d4473761f6dd8cbb470995ac610616c11c45aad5541833142d547adc", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "514d754d-ac23-421a-9b35-ff68e350907d", "value": "T14A13F167CF185A2ACFE002B442240711665E5C1C92AAA5FF510D6AEED3701EFDB989", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "da80b160-3475-49e7-8a6f-241df9cf958a", "value": "768:lir6qZ28q1OUvoniI2jVzH/fCWY6oMDmgVMjuZFG+rN7RK264kALZqHtnh+4F+Hx:lirA82O7np2F+6oGNG6N716zAtAJF+R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "a430d2f7-7d72-4814-bc6d-1f0d6acff6fc", "value": 44428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "d12a4adf-7e14-4567-8bda-60779ef7f050", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac242972-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848412, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "8dc30543-a186-4494-961d-169c77881866", "comment": "Malware payload (Mirai)", "value": "ef151e4a5b484ef71377da72315f7c0a", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "873fd97d-9ce1-47a0-b112-6f77c4641de4", "comment": "Malware payload (Mirai)", "value": "666b711826306621053a5b6bc58edb46adf79a178315d5fd492b076699274549", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "2bf6aeba-d322-4d51-82e7-0bbbc036b91c", "value": "T161C3AED7F68B24A1CC6246F007C76B8E2E6362119E6BE9E72C1E753B19391DF19063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "c5854c89-c3df-40bc-8d18-64f9cb8621ed", "value": "1536:fu189r2mIHgqH8IV3NB4BuLaLWqxIijGsueEoutC8xZJqKg9T/LWQ:21ur2nj73qBuLetRGsZutCpKg9Tq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848412, "uuid": "5d13b86d-7285-4384-bcfe-6953e3d3dc06", "value": 124352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848412, "uuid": "a511f241-909b-4b32-a84d-e479f14a2635", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac4c0168-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848413, "uuid": "8cab3e30-8dac-469e-af12-9fd99082f6e2", "comment": "Malware payload (Mirai)", "value": "cd4d379cdc93a1fcd3d9171a68a286ed", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848413, "uuid": "6c667a7c-3c5a-450c-a229-504d13ceb1dd", "comment": "Malware payload (Mirai)", "value": "cfae28c8312280a942ef00a22d443411454ad166a48369ca3fa2dc49e1fd68f1", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848413, "uuid": "8c45a9ad-58ad-48c5-b541-43733b87d57b", "value": "T187157D59FD0F3D4BC2D6E239DB8AC3F4722BB098D61351A325C1020DE6859DD8F629", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848413, "uuid": "78ae9ba5-bee0-469a-83c2-3348eb5a8b50", "value": "12288:0P/tw2y5uY5GV0j5G3wvzH0ohhyOcJRC0a5OAum4DX6Fo54dd447uo7w:Sm2L50j5GcgKYs7d0Km4d/7uo7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848413, "uuid": "c8469e78-73b9-4d3e-b5a8-a963f941f8e7", "value": 929256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848413, "uuid": "812fa465-e583-4c59-a707-fae82e97631b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac4f80da-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848413, "uuid": "de85867d-af1a-4de6-a461-04994681f137", "comment": "Malware payload (Mirai)", "value": "13367708de4de8c08b1d89b9c90de59b", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848413, "uuid": "f4280b60-e5bc-4442-ba34-d0ff04f9d59c", "comment": "Malware payload (Mirai)", "value": "e414fb4d8421e5e5a696bcc5c87ba6dd7b37391239fa1903091c46dbb21f31ce", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848413, "uuid": "9b5f7807-8747-47f4-ac1a-c046be5038f5", "value": "T12AC2F15DC70101AEF34C19B9B564CC9ABDD6FE2F2ABDD0ADCB7061241235AD6821CF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848413, "uuid": "a6e24073-eda2-4e46-9b9f-b3e9bee2401b", "value": "384:fx/dcBiKMqv4rjkkcAXSLtPJVnTPJcLGKq0nO62TDMGDdXzPItMcp9LqvehTp/fa:lqCqveFCDvtvDjUtBuvedRq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848413, "uuid": "881b7e56-2c52-4cb8-897d-d674359b0b29", "value": 27076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848413, "uuid": "383b0f19-9db1-4687-8622-34665e11489a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ac59d8a7-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776848413, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848413, "uuid": "e84b9958-a366-4abd-888a-9b08f20fd1cf", "comment": "Malware payload (Mirai)", "value": "f2607c888630f9f7ce949d3cb791ca1c", "object_relation": "md5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848413, "uuid": "71ae108f-3f5c-4dfc-8628-457cc75d0985", "comment": "Malware payload (Mirai)", "value": "9d40833837f795b6ad954c30e899a31c375b19fa3b6df3091ef0256792946f7a", "object_relation": "sha256", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848413, "uuid": "86a0b04c-58ee-4167-85e6-ef1ade224ce7", "value": "T1CF257D57B2B3B4BEC157C13447ABDAB2A935B47402227D7B61C4C7302E26EA41B19F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848413, "uuid": "57f843ef-89ab-48ca-9795-6f8add1a58a8", "value": "24576:CZkD9oF46Ij1JXKZHjSFKfHukbTrO/j/qrJT:E4446YGSFkukbTrCj/6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848413, "uuid": "3a86928d-8115-4b17-b8c1-0d299ed4e49e", "value": 994624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848413, "uuid": "34a9cf55-299b-47c6-b204-83d6b33b02f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b715868f-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776848431, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848431, "uuid": "c4e545fe-6888-4c85-97f3-1c4fda22fa96", "comment": "Malware payload (Gafgyt)", "value": "f828d374bbfbf09045269aacfcb99231", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848431, "uuid": "4d9cff2b-dbfa-496c-805c-c8744f0639cd", "comment": "Malware payload (Gafgyt)", "value": "df0f35be133fe0c0eaf730004749681beaca144ddfa7da624495fd4abd0d07c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848431, "uuid": "ab370dc6-4212-4b44-a045-83c028178ea7", "value": "T1E073088799229FBBC016F4F065F54E740B15BD664E1B0AD96435FAE0427F4CEB00AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848431, "uuid": "fb6fce8b-d93a-4212-b132-891c1fc65307", "value": "1536:wS5xbqmzZL+quXPKvA6K670LH/JCaIHalYGoR:wS5x27PXS4E+H/Jahz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848431, "uuid": "84f1a794-20ec-4896-b030-fa49dfb26f64", "value": 80700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848431, "uuid": "bad58233-f44e-4a77-8156-968f280c66c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01d3345e-3e2a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776848556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848556, "uuid": "517d0037-8331-4087-bd0c-2e94fb4008fe", "comment": "Malware payload", "value": "263fc418eccaf6081736369114223eb1", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848556, "uuid": "47dd9915-e615-4e76-bb99-61e8386a9103", "comment": "Malware payload", "value": "9b11465c681a52062544ce4063782c6ceca86ccdb10884e040f0b3b039fa1959", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848556, "uuid": "e0d924fe-f901-4892-b9cf-e9987b0478f7", "value": "T1B613E1A2C1CB9AA7C6304DBDF76F0787769E7AE4C1272170A4128F2D3ACA57102D87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848556, "uuid": "2fec8390-5779-4952-a128-7922aa09f94d", "value": "768:bvWJOqiYtOxtiPpPCTg0cpIJhBO8UeQ3EEs0U8/GpNiSyUoAq3U7kj:jHoGtiwTg/pKq8UeGsj8ObiSysw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776848556, "uuid": "629e0efa-143b-43fd-aa53-70b082c6db65", "value": 41444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848556, "uuid": "c6418374-60db-410b-aba1-30271da2f5b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae52a72e-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850815, "uuid": "a35dbbaf-c89e-438e-8430-104509f442c1", "comment": "Malware payload (Mirai)", "value": "f7459bc26baf2db287c39770f6a1e19c", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850815, "uuid": "9d879c42-f875-4997-9868-d7bb1917915e", "comment": "Malware payload (Mirai)", "value": "2e6ff09733af439cf1b67b91d5919942527efe946729e36c096413a44c37d024", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850815, "uuid": "17524316-5103-4b34-ba2f-7bd42ea0ddb1", "value": "T176830803EA41C47DC097D1704BEF9536D6A7B8BE033231196794FFA12F16AA0EE792", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850815, "uuid": "a2c21792-2357-4394-9f8c-cbc9ef3d467c", "value": "1536:YSMgYM5XAfMSvNRtvxDbzzFXJMZ8j65nUliINjwbpAii5jy:9zuB/88pQbLi5jy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850815, "uuid": "f2a63215-b332-4c49-8bc9-0b0b11421cad", "value": 82376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850815, "uuid": "d3d7f61b-ba50-41e4-945c-078771b108b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6244ba84-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776850865, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850865, "uuid": "95b11519-3298-40ea-a008-ae1125c7bd6e", "comment": "Malware payload", "value": "b554b135d52a732d19709eab077b8bf2", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850865, "uuid": "a41d1d77-70e4-4a61-96f0-bbdb0b3f7bfd", "comment": "Malware payload", "value": "37b1794342b8754c21d86885234994bb0a7a06d2bd0cbf0b118b7b5ad4a879cc", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850865, "uuid": "0d0456f7-2481-48a2-a2ba-bdbe8408238c", "value": "T13AC080D260242F00C044BF143C5BF7BD1402FBCD214B0B445CD5352DCD1C420F8105", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850865, "uuid": "16f6b539-9d05-42f1-9a60-981794bb494a", "value": "3:L6F0FSXFdih3PFGBzOdFLTUWitL0RD6FB8Fdih3H3zOd/IUWAkLK:L6F0oXFdih3kqa6RD6FiFdih3HQ3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850865, "uuid": "1a40ddb7-42ae-48df-8d93-21f2a6720f23", "value": 178, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850865, "uuid": "d36cd289-c6db-4df0-9006-c015eba55ebd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4bf6b8-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850867, "uuid": "3771be35-edc9-4353-bbee-eca406e25eb8", "comment": "Malware payload (Mirai)", "value": "85c3f6e2a6488aa17718b3687f8ac094", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850867, "uuid": "520869f2-2175-4c7e-83b1-34d4f537b60c", "comment": "Malware payload (Mirai)", "value": "13af144a88b47447440f8bdb778e52c7798e048dd5a6a92b073835001eb3dbb2", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850867, "uuid": "68d21496-ad40-4e0e-b4fd-a51690c133f2", "value": "T174630846B9828F03C5C261F6BBEF42AD371267EDD5EB3207D925BFA03B464D60D265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850867, "uuid": "6198ba85-6042-40ec-a856-81dad6f836bd", "value": "1536:0Jjy7MfX2F8nOoujNOnFKeNumWcr4wvnpO:0hy7Q2F8nOouTeN4enpO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850867, "uuid": "86e2b801-1fc8-452e-a9f2-53c6079bcad9", "value": 67256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850867, "uuid": "3daf8a9b-5dd6-4f53-a297-0b7bc91fceb0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4b6fce-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850867, "uuid": "ff8ef8b5-6c70-4b9b-b527-93add5459f0a", "comment": "Malware payload (Mirai)", "value": "b5b808c18cfed0634f394d35376e90be", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850867, "uuid": "38dea963-67ed-404f-8af9-312128a362de", "comment": "Malware payload (Mirai)", "value": "8bbf0d368ac691acc6c185edcadf658e332120f218fc421dcc140fa29cd24e80", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850867, "uuid": "9ef88cc7-08cf-4a71-bdbf-59353e7620f0", "value": "T1C353F746B982CF03C5C261F6BB9F426D3B1177ECD5EA3207E925BFA03B464D61D2A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850867, "uuid": "334c0249-a51f-435c-94ce-89f36f4e2814", "value": "1536:W6QoH4zMlYkl/KDHs8A+zQjXO0LklHNTocQRuROd:W6ZYzMljZKDM8A+zQ4lH6crRO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850867, "uuid": "f4a6a807-86f6-4e28-a653-8b22a3e3cab5", "value": 65412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850867, "uuid": "4cd57345-2621-48d4-b269-a263b1a80c5d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4ccb63-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "6ca7e4f7-a2b1-4399-99e2-952be126a3e0", "comment": "Malware payload (Mirai)", "value": "29ee5ae4ac935fcb6dd47d9f8a5aa8e3", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "d3e315e7-771d-4132-b0b4-fe08150d46dc", "comment": "Malware payload (Mirai)", "value": "404407084230856208e5d1ab6ce7bdcd36addc5b05759fe4edc65238a01823f9", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850937, "uuid": "ca7066ed-1f85-4213-8971-7bbcbfcde0c8", "value": "T146839606BF214FF7D8ABCD7746F90712349CA91621A83BB5B534E468B34A18F05D39", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850937, "uuid": "6eb877f2-4026-479b-ba81-a0c7b82a40cc", "value": "1536:cOuEFa6pStRCKVyJwNmuKmIO/O7vv9u6glcZam7DZ0XAV:cf/tR0JE4O/a9JamPyXA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850937, "uuid": "914d2888-eda4-41ec-bac6-f58b4171de4c", "value": 87668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850937, "uuid": "47a1789c-a3ed-40f3-b206-93ab90788a60", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae5fd8e3-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "1596d65d-f75a-47a3-8951-9018f49ec451", "comment": "Malware payload (Mirai)", "value": "52e242b97827e6a3c3e5ac0202214fef", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "d51e00c0-0a9f-4c28-8bfe-7d08c005c429", "comment": "Malware payload (Mirai)", "value": "ab50882f051add575c083b5ec856f0493166676a0161c9c85bc6ef85102c3331", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850937, "uuid": "8ab779d3-4020-442d-861b-9e80832a94e4", "value": "T13C635C02B70C0F43D4532DF02A7F1BE09796FD6226B2A1807919FEC94671EF26546F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850937, "uuid": "5528df02-dae8-4bf6-99d1-a1794e166416", "value": "1536:7RDLzauIvQxrddatYjqk96YCtaz2/1uWW:cXmdaeIYs6eXW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850937, "uuid": "fd54d11f-68bc-4bb1-88c0-30bfeeb6b3dd", "value": 67344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850937, "uuid": "772fb214-9626-4e7d-baa8-7224c717cc95", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "64fc553c-3dbe-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850937, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "67920aab-2d9b-4645-a4f3-4c660efc4448", "comment": "Malware payload (Mirai)", "value": "9867c017d2c369841c65739f9d253b81", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "36f4aaed-f679-4afe-bfdb-43c4de8afc69", "comment": "Malware payload (Mirai)", "value": "cd12071a4e39313ed81a386235286ea95a3ce8551087a8058f231995ea217f54", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850937, "uuid": "c682af97-1b6a-4ed2-8f7f-32313dfe1bcf", "value": "T17983C61A3E218FAFF32D827547F74E31965872992AE1C688D17CFD412F6028D641FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850937, "uuid": "de0dfa2c-a42a-4e80-9d04-5d55c81d8d22", "value": "1536:SPl0Z7DjPoIrWt5P1sf5FDOal2S8KmXKfd3MNQxeR5s:T9Wt5P1sf5kal2S8K0KF3MeeC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850937, "uuid": "9b771707-8d45-4836-9a5d-28ea49ffb840", "value": 87396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850937, "uuid": "d06790c3-4cd0-4d65-b989-75f09bf3c770", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d83e9f8-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850938, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850938, "uuid": "5cb7bdf3-f095-4e8c-a918-00052ec9879b", "comment": "Malware payload (Mirai)", "value": "a65b2f002efde9b3d0d2f9ff4fe176aa", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850938, "uuid": "e347dc7e-8c1e-48b6-84a9-0368f47c770d", "comment": "Malware payload (Mirai)", "value": "e99116e843033a68ed37b65c55628dce1e4d0834c4643f7a0ddaafe43b757272", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850938, "uuid": "32a4c350-37fe-44b9-914a-1c3c28e0f14c", "value": "T18AE06DEC65712AC757249F00F86E83989A43EAC834B15A10A55534AE97BC1027D60F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850938, "uuid": "7694b828-40eb-49f2-a51f-8e143c7f5609", "value": "12:3J3u9qxurNIl5zAxu7c0LKjxuzCxu5xuRiAUn:3J3u9ZrNI7T7fKEzhKR2n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850938, "uuid": "3d19e9ac-e3fc-441d-8f3d-b97d26ac8918", "value": 393, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850938, "uuid": "f7fdccba-266a-4127-8f29-1af2ec748920", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b1235285-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "f5149883-0a63-434e-bb58-ef2d5c488bf6", "comment": "Malware payload (Mirai)", "value": "da6f6519fd94ce46b7f579dbfe25c5cb", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "51f018c9-1605-4c9b-8c84-79292d6327cc", "comment": "Malware payload (Mirai)", "value": "ec05747ce3ba5d9bf1f1c66d9696f9b3dfbd26bcb82d0588b77879369533c5d2", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850943, "uuid": "8b376a29-6d7b-47c9-9cd7-d5964f1aa081", "value": "T1234327439E06AF46D14BA1F062F28E798B52FC694A631EF9A565FEF44143DC8F0093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850943, "uuid": "a5a20ff6-9135-46de-a6e5-c6fb773711f7", "value": "1536:lTV6gEft3RBYF2ADnlhCWRX7KFMC0KNFrLGG88Z:mJft3LALlhrOFM2zFZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850943, "uuid": "536107f9-eb94-46e9-bb4f-8a1419a3ceca", "value": 59612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850943, "uuid": "af642ece-a13c-4143-a2b5-6c2abc61e692", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae484b4b-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "79c4261c-7cc1-4bc9-b20c-288c2db30c29", "comment": "Malware payload (Mirai)", "value": "49e7cefd2b116ed1e51aa86af564ab8d", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "ccee37ac-8f96-41c7-8236-fdde40fe640b", "comment": "Malware payload (Mirai)", "value": "e8755beab3b011d91269c15a21cbc810536e66426c27a4b7d69b160f350ff6b7", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850943, "uuid": "cb7b7069-164e-4f68-aadb-ff2636819af2", "value": "T1E0F21B075900662CDED1A8F4C90ACF21DC117A445E6F25C7F2E4FD564ABA3D8AD2FA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850943, "uuid": "46b73297-dd20-4681-b2e8-4280275a9d5a", "value": "384:8vz8PQ4SUWJ0y9U2dLqcw0PYpGuZgL3g0nCeaWnVLrN3dwXDEZZDiJviNHtN7b69:8v8tSJ9XYZZgk0nC4XslVdEkSbG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850943, "uuid": "09396622-028f-4171-a0c2-a5e0f77536eb", "value": 36460, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850943, "uuid": "49908cb5-b26d-4b91-8608-65b1dac0a7ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae4301cc-3dd1-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850943, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "456f6d19-1f01-4422-b931-3ced3602b088", "comment": "Malware payload (Mirai)", "value": "963af3af6ed289a651be7a996e45d732", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "b1ded682-38a9-4663-9b0a-640228bae5a6", "comment": "Malware payload (Mirai)", "value": "f94e7cf6e5f9005f3579e5373d049e417297e4cc267c41e2c63d2a2126552b5c", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850943, "uuid": "2ff493a3-a4fa-47a6-a753-fdbe0d166678", "value": "T13B93080ABA919F01D5D631FAFA9F414D33536BBCD3EA3102D920AFA037C69DB0E665", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850943, "uuid": "9cae287b-aed0-4a3f-8ce7-f6489d0b3206", "value": "1536:KlnK6vU2DGyvelXkk0JuWkz/MxI08wUiqrG1pgQugdlu+iwB4an2vGY7N/qn:vqGtSkvwUiqrG1pa3wB4an2vG6/qn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850943, "uuid": "5d48512e-8591-4cea-b2dc-59d436d295a5", "value": 92132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850943, "uuid": "dd0903d2-1b1e-4c89-8e4f-41afd66ddbc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b12fa285-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776850998, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850998, "uuid": "c1332213-5d37-4fa3-8371-668cc3e93b88", "comment": "Malware payload (Mirai)", "value": "cc48c5305655349149183695a17430e2", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850998, "uuid": "3bd97128-f34f-4daa-af34-25f3822a816c", "comment": "Malware payload (Mirai)", "value": "5e9f35aca869a797a7f6c5964818fd0453720b1d0e064425012b19bc5df583f7", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850998, "uuid": "77b38c41-81bf-4b2c-a1ed-f623892af158", "value": "T123F090ED616037E604085F00F42E879899479FC820A0165C698C34FFA7B8D10FA21F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850998, "uuid": "a821e3e1-fcaa-417c-aacf-ed34da3ee3c3", "value": "6:kdihX9B8dihdL6B8dihrNIl5zMB8dih7Fa0LKi6B8dih3kICB8dih3HW0XB8dih8:/XjX9qXrNIl5zAX7c0LKjXzCX5XRiAUn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776850998, "uuid": "19b85d2c-159b-430f-a005-44f4504bedac", "value": 510, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850998, "uuid": "2164ac81-ff06-417e-b8cc-955ff72b1436", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f21fe294-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776851107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "a926ce92-0de1-4d9e-bd1b-61669c2d2093", "comment": "Malware payload", "value": "cbebeb8438f620691c11ac08b010dfcd", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "28980d83-5f8c-4b3c-9ecb-32df0e5f82d0", "comment": "Malware payload", "value": "99e0677d61e76e7ffadb98ceb42d2dfaa13debeea8b1a74caa1e9a964679a097", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851107, "uuid": "c821e8c7-0a92-4c4c-837e-5b66c372a12b", "value": "T105D05EE6E1321AC305219E0CF221C9A0A1A2C1CC02A7ABAC7FA8201E023C910B910A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851107, "uuid": "429efab7-6295-469e-98c7-7f1ca3aedb73", "value": "6:L6FGoFdihdzNQdL6FG3GjFdih7FaKLKiHi6FG3GjFdihDaNeFdRn:qspNqJGjs7cKLKbGjsWeZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851107, "uuid": "5ed22936-62ef-4783-b2ad-2348eb0de72b", "value": 255, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851107, "uuid": "e5921edf-0186-435e-b788-12080ae769ab", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f233b52e-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776851107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "8612bf7d-56e6-4f3a-8488-60ed8f75b6bd", "comment": "Malware payload", "value": "0502a3b4e33fb65eba950ac0b508e8d3", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "b71d6afd-b812-44b6-b283-c626dbc4ca20", "comment": "Malware payload", "value": "04b4cf3b6d030bb2d55adc7cc2ce5a906fae3f0c22df4539e4325301be18c0cd", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851107, "uuid": "9bea0aa2-ff2d-494d-806c-c7dacf61de6e", "value": "T117E065E6E1311AC3C001BF08F967D6E56552ABDC26876B982EF8712EC63C8207910A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851107, "uuid": "adca81fc-bc88-4c47-8995-71fed3c9a666", "value": "12:EsrLPNsdWtspAGXsrNIh5IekhGjs7cKLK6:EsrL1sdYspA+srNIfLk4s7XK6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851107, "uuid": "551866ac-89f8-4c0b-8930-8d7b02eaabc7", "value": 430, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851107, "uuid": "30f9c797-e1cf-45b2-98f6-03326266a99a", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f235fdfd-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776851107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "9e6c8061-8a4c-4ca6-9126-4300205c68d1", "comment": "Malware payload", "value": "6d410ed00c44942df397c178d515c6c0", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "9653c600-18b8-4b51-97da-38509b45fa45", "comment": "Malware payload", "value": "93ebc64f645c21886627c8b042cc9345299d049ea086acef4b075008b9321bd7", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851107, "uuid": "a2918580-7dd6-484f-a5ed-5676374b62ac", "value": "T1C0F0B4D6E0301A83C001BF18F96AE6E46062D6CC11875B9D2EE8B52E863D8207900A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851107, "uuid": "7e6dadf3-308e-4294-ac1b-8984e4a02b3c", "value": "12:EsrvsesphoGXsrNIh5VkhGjs7cKLKpgXsWezJ:Esrvsespho+srNIfVk4s7XKWXsW8J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851107, "uuid": "e26c075d-3b0e-4038-9985-386a2775b9d8", "value": 515, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851107, "uuid": "cc0571d1-36f6-4d98-902a-d949a5621867", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbb43f24-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776851123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851123, "uuid": "d578ec7b-e0e8-46a6-a413-0b63a0cef3df", "comment": "Malware payload (Mirai)", "value": "f6786fe65bdc0fbbc87599e511d91716", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851123, "uuid": "0cba5029-deb2-4a1c-95ac-1c11a7277c38", "comment": "Malware payload (Mirai)", "value": "ab7f10170e78a21139787ee9118d91d66de7cba42415ae7979ac90d2d553c368", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851123, "uuid": "1aed6be3-7c01-4cc4-925a-970f02d1dba0", "value": "T131F0E2E6A13017A3C101BF09FB7683E4E15269CA1282AD34B6E4706FC63C468BAA12", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851123, "uuid": "8c5825e8-79d5-4651-9465-2baf9f01302c", "value": "12:p+rM4+y+p7Ai+rNIh5akJL+7cKLKni+We2:QrUhp7AxrNIfaks7XKxWl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851123, "uuid": "b587b937-bdc6-48e6-ad9f-3adbcaffb33a", "value": 509, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851123, "uuid": "4cc62073-6026-43c3-96c0-92e9bd139ac3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fbbe5f5f-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776851123, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851123, "uuid": "500bd818-c428-4ab3-949d-7843572da37b", "comment": "Malware payload (Mirai)", "value": "a3214236e26193d635524affdd27e31d", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851123, "uuid": "887ae45b-f980-485a-a872-bd7228b6659d", "comment": "Malware payload (Mirai)", "value": "08249bcf25470f56e93a76e7e203ceaa797e215e86c091a279bf1ffc7ff04376", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851123, "uuid": "426ac5c9-8784-4062-84bf-65f0f151e913", "value": "T174D0A7E6D1332BC304198E08F5E1CCB0A192D08C0283BFDC6FFC281F027D8043A10A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851123, "uuid": "2d3aabff-f240-4372-9ad5-6633978320c2", "value": "6:L6FGoFdihd0XnD6FGaxAjFdihrNI4jD6FG3GjFdih7FaKLK5:qsWXnmAjsrNIQhGjs7cKLK5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851123, "uuid": "725525ad-165d-44cb-97f1-e77e52929220", "value": 243, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851123, "uuid": "f41379a3-5cae-4fba-bcfa-64fcc2452fd7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5c20ce8-3e30-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776851408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "d21e28ba-81b4-41cd-b990-26a8c2a54ef2", "comment": "Malware payload", "value": "865305869a9873c04a3e726c60a2cb2d", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "e2034b94-3cca-4134-b88b-8f36aec7ab5c", "comment": "Malware payload", "value": "349c69f48519d20948c81a81613381506a4694adc3708972b37a7502448ea9f3", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "f9e47dd4-813b-48b9-aba1-4c1486b53515", "value": "T152F0A0E9E2321AE785055F08F552CA94D196D7CC20E7ABEC7EAAB15F027D5107910B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "a50c8471-3054-41ed-ac4f-67331b6c0c2a", "value": "12:mspOssM8B4Vsp6NYqXsrNIh54ToGjs7cKLKhtXsWe5T:mspOsWB8sp6yqsrNIf4T/s7XKhtXsW2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851408, "uuid": "3fbeb4d3-747c-4cd6-bdb2-75d725d76daa", "value": 461, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "a418642c-de12-45d1-ac33-593ccfeb8097", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5c6ece5-3e30-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776851408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "2f6d8154-2c83-4b78-81c8-1f9441a605f4", "comment": "Malware payload", "value": "f63b73de16a6bf62386f1b17a808780f", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "ede21b3e-ef1f-49c9-bf3e-228d64d49229", "comment": "Malware payload", "value": "f2cdc3821fbb5d28d74ac5940940e891ebdf70d17ea9460f53cd1dc326fe2f3a", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "dc844dbd-6141-49fd-bcb8-caa7d803860c", "value": "T19FD0A7E6F1321AC30418CF08F061E4E0E1A2E48C0283B7E82FEC381F023E8303A10A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "60c3c081-168c-42e0-aa5f-08684a8a0d93", "value": "6:L6FGaxAjFdihrNIRvJV6FGoFdihdzTHBV6FG3GjFdih7FaKLKiC:eAjsrNIVJUspTHBLGjs7cKLK7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851408, "uuid": "baea284a-9a28-4518-b792-3afddd925117", "value": 241, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "aa0744b6-fae3-4edc-8099-7eae92084570", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5cf4b73-3e30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776851408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "12373472-ab16-4a6b-a928-2bf085579dbf", "comment": "Malware payload (Mirai)", "value": "cdfea3c686b5a55fc0a4d02da1916619", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "c1901c39-7f44-4148-b82d-351d2cf82a54", "comment": "Malware payload (Mirai)", "value": "5a725048391e5d055281247ba0fd598f7143ac1d2b7fab5719736d92c9114346", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "7ca04e46-db78-4bbc-b5bf-8c6f3fe0ab95", "value": "T1AB31C9F9A1311ED3840ABE09FAB656FCB073B1A906961E696ED4787EC67C4207E016", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "c4436f22-8532-4991-ae2e-c90701b48abd", "value": "24:EsrSsGjsrNhsp+ss7XKfXsW6r5zep+D7XKUWJHOT7aVouQp08ooCvoCSkl:EZrjwk+smXSzf+HXe0o5dR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851408, "uuid": "bef34053-6846-4ff8-abe8-a57e10f1ddd0", "value": 1588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "fb62e676-6cba-4169-ab7d-f961ee527407", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5e7920d-3e30-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776851408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "e0a7f850-0b9d-4a74-8d15-c4db63c74d32", "comment": "Malware payload", "value": "0a89d9a3b83c7122286b7c6b354b2e56", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "933a5628-305c-4130-9656-ebb3f3dd6760", "comment": "Malware payload", "value": "955559db92f38cc59da5829d04207508ad641ad9cb240d1107f20853703bb267", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "cedbe5d7-d382-41df-8ece-8504c7b5c604", "value": "T12BF030E6A0300AF245107D48F1A5E9F4B8EB51580E635F682BB965FEC239428BD500", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "788a2917-ae65-49d1-8a20-97b2f0e5074a", "value": "6:L6FjmjShtt6FjzOehzR16FvuVPFdoh9316Fv1hx5P6FvCRH1LshVLKil6F4eUehT:r8tzQrVPFd29Qx5lhZyVLKP9ei", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851408, "uuid": "1fec93ec-aba8-4b16-b877-d80146b6a328", "value": 478, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "0bface93-6923-43db-bc2b-c2ef6365a2c3", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5e7db6c-3e30-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776851408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "e8db6954-f094-4f08-9f69-c537d9771de9", "comment": "Malware payload (Mirai)", "value": "cfe9302a2203ce3ab86f7b87a5bf7b87", "object_relation": "md5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "97bc2925-9f08-4de9-a4f2-98a58c70e609", "comment": "Malware payload (Mirai)", "value": "e485017a56aeec0934697f809bd15de3264bed828ccda6ae5b917491bb949a9a", "object_relation": "sha256", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "cfb6351d-5e40-4446-8675-cce9548cb90e", "value": "T17DF05BD6B1311B834845BE18F469CDE4D262D6CC26876B986FE8706F863C9147A116", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "da89663c-5299-414f-aec7-4a86cab9c49d", "value": "12:Esrlws4spYXsrNIh5OGjs7cKLKFfXsWeU:Esr6s4spUsrNIfRs7XK1XsWv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776851408, "uuid": "ba0f971a-34ca-4acb-a0e2-f55c300c0501", "value": 512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851408, "uuid": "85fb44bd-648a-4b47-8a22-b71fc18c720e", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e2dbd54-3e3a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776855556, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855556, "uuid": "12025436-e2d0-4cbe-8277-2af5f2256357", "comment": "Malware payload (Gafgyt)", "value": "6b5b6079f978e1069d423208720da5e9", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855556, "uuid": "fe341753-4e66-490a-be90-eb40e0da4b4b", "comment": "Malware payload (Gafgyt)", "value": "445dda23134321b39d104c032b3d5c1fe60ff7436cf6c5320906abb05d7141fd", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776855556, "uuid": "350b0077-440c-4b81-98b5-a30bfc58866e", "value": "T1DE11C8CB50D4EC5297E9D62E7290C615608C93C663EFAF9CEED57C15C9C880DB029F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776855556, "uuid": "4a84cc50-8d15-4e61-96e2-e7a4ec7f5b72", "value": "24:sQwQn0QIQ78QmpQTEQt/SQUQ1SQONQD0Q1yQN:sFG0F9bpMEG/SJNpS0QyU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776855556, "uuid": "3e0cfd5d-1755-4685-9d81-02bfec251287", "value": 1010, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776855556, "uuid": "3e27cee7-ddf3-497a-b4ab-7bc55d190892", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4374e989-3e3c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776856397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856397, "uuid": "c5de3f72-6534-476f-b756-6fe583316596", "comment": "Malware payload", "value": "76cf5bc4ec503ee1bf1a42dc795a108a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856397, "uuid": "05d900ef-b946-421a-9da2-c4c370918823", "comment": "Malware payload", "value": "d59c24a61304fb2eb3f5ab620d72f62b9c306a6e919534007e27dc8d0763f863", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856397, "uuid": "54896fd5-cab8-4836-87c2-ff5afb08f9b2", "value": "T1AA34CEFE2B2F769A04634E60D54970728EFAB64F71E3A1EE510E32887CB497105D4F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856397, "uuid": "153816b4-bb81-4fb3-9d0b-0a1482ff727e", "value": "3072:wYB5BPPggXoVHoBLU6BLf8IMEbCV2rErmPp3Ah3N4JnzeJvIYu+SVbmVJIlFcAUG:JP2Ho3leUormx3INMnyVLuXPe9A0Zox", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776856397, "uuid": "6986e2b3-7421-4ce2-9a5a-fc07e6cb3894", "value": 239679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856397, "uuid": "4b3e7b7b-a7eb-4417-9120-2685d92d4aeb", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5132fd77-3e3d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776856850, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856850, "uuid": "cdc531f7-2e23-4040-b947-aaa81168fe80", "comment": "Malware payload (Gafgyt)", "value": "06c789b8e6a89d461f0ad24e421d54ee", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856850, "uuid": "34ae0f79-f48d-41d5-b8b0-e4458f18a3c7", "comment": "Malware payload (Gafgyt)", "value": "992befbe4fb11188363057c9414267b1d4876b3115d6cfddafbddb95e0044358", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856850, "uuid": "1bd0bea9-4bf9-4d84-9e40-dfb0c5c6d1fb", "value": "T13503E11D20053DFBFE1250F847C953021EBB8A95C4959E4696F3D63999722733273F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856850, "uuid": "35138873-a516-4481-a60e-def10f061f7d", "value": "768:/zfk3hQeYO76yxLQ3MCdcKurAGfUU6USC98WRp3ud2LWJgGlzDpxYsE:/zMxXF6y5Q8CqzxfUU6USUvRp3u0WVro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776856850, "uuid": "4844a403-9085-4ed4-862b-d05ed1e4f23a", "value": 41144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856850, "uuid": "94196ba3-65c5-4571-94c1-42d5920e1ba0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bce1eac7-3e3f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776857889, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776857889, "uuid": "a81dee6e-dde2-47ce-8b3b-9dcffc06d086", "comment": "Malware payload", "value": "08386d379da42da0615eb2ee6f03283e", "object_relation": "md5", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "vietnam", "colour": "#412c93", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776857889, "uuid": "6a0d7987-f894-415a-83fd-56b3dc9418aa", "comment": "Malware payload", "value": "46d712f1b3ea3777103c38af29ffd624174a94b59b280be064ee24acce2a8b42", "object_relation": "sha256", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "vietnam", "colour": "#412c93", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776857889, "uuid": "6df83a80-3313-47f2-b986-b5f548589ea8", "value": "T19FC62289FB58D92FC8773036497A523116578D128F939B8369583F0C6CBB6E40F99B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776857889, "uuid": "ae84c322-08ae-4ff9-a4dc-1ceb9d5b7fa7", "value": "196608:aJcBDk2khbhjMmp9X5erb4ppgDGNYksE9YaZKihc0mec4ojW45zDEi9K0PWVx:jBDWbhwmp9Jer8jg63rXZphc0mec4cWD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776857889, "uuid": "f97add77-7ed0-4c65-af12-56c96d9ab91e", "value": 11946111, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776857889, "uuid": "58e101d7-a77e-4d63-913c-5ea84162cb6f", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c348d9ae-3e43-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776859618, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859618, "uuid": "5b398c74-b9d6-47fb-9920-35dd94a5a36d", "comment": "Malware payload (Gafgyt)", "value": "618fe9f41e609a4b0637ab7c90beb610", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859618, "uuid": "05b39435-7332-4b8d-8f1d-317661a5c212", "comment": "Malware payload (Gafgyt)", "value": "0102ad7582030c74bd584fdb409ea73260df147dcf45117bead522f4036bf95c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776859618, "uuid": "30397613-0032-40f2-b7c9-667eb566f2e5", "value": "T168F2E100413AD98FD57C55715EAF291A2C241F0CC948A9BD4F48E46BF9B8C3AFD287", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776859618, "uuid": "980911c6-9228-46aa-82a4-66b4d281446f", "value": "768:VL5PeOg/1f6ub4MzTMegyIfAmZjB1ztZRf4nbcuyD7Uryq8:zeZ/1i04WTrTedT4nouy8mq8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776859618, "uuid": "8f1a8150-f39d-4c2c-a1f0-301d7587ce89", "value": 36588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776859618, "uuid": "b04c929d-43cd-4c5d-b8d0-cfa1765686df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23c6b490-3e45-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776860209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860209, "uuid": "fb95964b-9c3e-414b-a093-cf8c0bc6eead", "comment": "Malware payload", "value": "036a52a8c7a5527af4f546c65e0d191e", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860209, "uuid": "5cbbd484-d177-489a-9c57-77e9e2a404e9", "comment": "Malware payload", "value": "4b485ef987858fc692b46cd45424a560a84381f615a0997ef39cc37bd11b0135", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860209, "uuid": "fa25acbd-11c6-4cf3-9b3a-b3f29571a30f", "value": "T14693193178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860209, "uuid": "7cab2c95-3e44-4a72-b3c4-5b55e176b25b", "value": "1536:nByp1tF/uwMmAIa14oX/KIlepeV7tb73WdxCrCitkb5fv2v05xWjrIKM/s1kKXrW:n8JIe0GitkbFv2v05xWjr4/s1kArty7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776860209, "uuid": "ffae1a17-8e71-485f-85c9-0514ea1d1769", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860209, "uuid": "fd16007b-3540-4d5e-922a-6a269c846434", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbd6f4d4-3e45-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776860491, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860491, "uuid": "3d088c65-9e72-455e-9dcf-f5d98e6d02b3", "comment": "Malware payload (Mirai)", "value": "82c4ad5ac520775fc0e457b338832312", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860491, "uuid": "036ac44b-42ca-42f0-86df-48ddde66d8ad", "comment": "Malware payload (Mirai)", "value": "ce58f79876dea15a64464368ab684d4172ccba4d947e23734a3bdb7abc6b0a9e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860491, "uuid": "d836f041-396d-4653-bb5e-9f98f9e7cc4e", "value": "T1F523E198D70DE5F3DC91493EBAE3854B3162881DD16737C2B42041BDFCDA9A992B92", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860491, "uuid": "a9cd8e3b-4d10-4d6e-a66d-699846952449", "value": "768:5ITT8VxmP4oVRwdPofD9zv4EgjBxcTluwaUaHSye+Hz4GihFeCHXchMluWgNPq3w:5sT8VxmPPAJ6zv4XBxcTluwjay1+0GiA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776860491, "uuid": "a22aa4e9-e1c9-4c3d-9f3d-410207a4011b", "value": 47368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860491, "uuid": "9becbd16-8fec-4dfe-a48c-c51fe789e5ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23b696b5-3e46-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776860639, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860639, "uuid": "4092adfc-46a2-43a2-bc60-7075b90da015", "comment": "Malware payload (Gafgyt)", "value": "e935ff56d68754d4b7b4c5bca612b5e0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860639, "uuid": "1e24e214-c25e-409c-8635-6ec1d4180d83", "comment": "Malware payload (Gafgyt)", "value": "c6f112beb875598b2aa747fe555f6a99ffc9200857906b20bc12f098435ad050", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860639, "uuid": "69ee2f25-7011-44ed-8344-8483da4f089b", "value": "T1A5F2E111909635A0C97028B4C52A7F82EB460BF5D71B5EB31970166C9ADB0276CFEA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860639, "uuid": "5c0cf13a-57bf-4fcc-b5a1-cca5086ecfb4", "value": "768:dUPzLkB4EtU70vR/2g7+M8rL42XL1r5/oFSZq5NoWQ3Ug:GPMBbUAv5crcuTcSZT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776860639, "uuid": "6d6fd917-7f08-48d1-b4b5-db6e6c889750", "value": 36036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860639, "uuid": "9fc18098-4402-4575-a842-0f11dd2cb3ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bd970c4-0ef2-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1776861626, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776861626, "uuid": "1b2d4192-f0ac-41ba-b6ef-e9917a44f550", "comment": "Malware payload (CoinMiner)", "value": "8caa858a427dda38bced89183ad90530", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776861626, "uuid": "80c459b2-bf58-4c77-89e8-4ed8d2411f40", "comment": "Malware payload (CoinMiner)", "value": "717fac4c5f7f77428de80b2da5edf4af459f6076ecffb288bcbdcede21f81961", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776861626, "uuid": "d9c1585f-0d33-45f5-9a32-2f25df325347", "value": "T1E0563355F0405822F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776861626, "uuid": "8a7a30c9-d00a-405b-904e-885d8aeb1331", "value": "98304:EUJC6pOfTFU00bm8FmH/tFErRoSncMEOJaTMOKXX+Li3jxqQjz4F4VRc:JWfTFU3muRH6OJAMp+e3jYqW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776861626, "uuid": "8b16d2cd-4b8c-4426-a6ef-9418896c2896", "value": 6271188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776861626, "uuid": "cff0999f-ddf1-4717-b29b-075edb6b3255", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "189a2a43-b7bb-11ef-afe5-82aee05be84a", "comment": "Malware payload", "timestamp": 1776865972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776865972, "uuid": "a1fac739-39bb-4375-8a87-7ca5396f07bd", "comment": "Malware payload", "value": "e89f75f918dbdcee28604d4e09dd71d7", "object_relation": "md5", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "APT", "colour": "#cfa990", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776865972, "uuid": "64b440f7-513f-40de-aca1-7b30b978c924", "comment": "Malware payload", "value": "6dc9c7fc93bb488bb0520a6c780a8d3c0fb5486a4711aca49b4c53fac7393023", "object_relation": "sha256", "Tag": [ { "name": "@RawabiHolding", "colour": "#4a63f1", "exportable": true, "hide_tag": false }, { "name": "APT", "colour": "#cfa990", "exportable": true, "hide_tag": false }, { "name": "apt33", "colour": "#810f6e", "exportable": true, "hide_tag": false }, { "name": "BB19", "colour": "#4f0baf", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "darkcomet", "colour": "#3137d1", "exportable": true, "hide_tag": false }, { "name": "DarkGate", "colour": "#180653", "exportable": true, "hide_tag": false }, { "name": "dmg", "colour": "#fae494", "exportable": true, "hide_tag": false }, { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false }, { "name": "impersonation", "colour": "#a2d3b0", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false }, { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "Pikabot", "colour": "#e499a3", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "Qakbot", "colour": "#f19758", "exportable": true, "hide_tag": false }, { "name": "qbot", "colour": "#38040b", "exportable": true, "hide_tag": false }, { "name": "Quakbot", "colour": "#57da04", "exportable": true, "hide_tag": false }, { "name": "remcos", "colour": "#9984a9", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776865972, "uuid": "529c966a-4a9b-4e76-830c-05efa46bd908", "value": "T1EEB092DDBC61E48018E535511EA3B60D146A22EBB9018B4018C00836A96035F8D0AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776865972, "uuid": "d0e77075-ea89-471e-badf-8911c371b2d4", "value": "3:PouVIZx/XMn30EEBuvFfD0OkADYyT0NV9kBbZWM:hax/XW3/p5mmYyT0NVuB9d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776865972, "uuid": "0b1d8f83-7b06-4dbc-85d6-88ddfa3302c0", "value": 114, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776865972, "uuid": "ec511d0e-53d2-4a6d-86b3-c74893a36d1d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5802c563-3e5b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776869746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776869746, "uuid": "9f195dc4-c33d-40b0-a0fd-da3887b3e432", "comment": "Malware payload", "value": "62c42a7fc3dff9f73c0faab09f856d68", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776869746, "uuid": "9ac81a4b-6d53-4042-85c3-6f7e61345508", "comment": "Malware payload", "value": "a5ea5d7cb3d29b847b574dd607affa0e7d7add7a48bf0f4d2f38d2299ec02479", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776869746, "uuid": "57ecea0c-cb5f-456e-8dd9-f1eed5380a50", "value": "T1E28309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776869746, "uuid": "3d9192dd-321d-4bbd-a8b2-6563bee4d2d7", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn0Wa8VN/:XEKltp9txAX/yr2pb0WtVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776869746, "uuid": "b4d22f01-2ed3-498c-91db-3f8d7a439854", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776869746, "uuid": "a056d4a1-a517-4930-a483-c63152587f34", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "396a723b-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776873560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "d4fe5fb7-32f2-40ca-8d86-95e2ce81eccc", "comment": "Malware payload (Mirai)", "value": "1f03defaab2475d949d52af9388317a4", "object_relation": "md5", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "30d221db-18d0-4c09-b9ba-80efcabdf9cc", "comment": "Malware payload (Mirai)", "value": "e511a3dbfe2ff2d50c7b62916b1becb684fbb35bd3ff7e9e505ee4fd3690da02", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "f4456b85-7e74-45c1-bc48-7948c78a4bc6", "value": "T124333A13258089FCC40982B147BFA62BF562F4BE4234F58D6BE87E26FD5AD310A5D4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "0fb92be8-0279-4e58-8021-51d3d8830995", "value": "768:y4RJrbgdrXpCJ9t3C0q0GNls1qtgNod6k7a0iGxDopKXobK27ncKleTBn:Xrwa/t0XNlEqSCf7a05xMdO2TcEeTBn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776873560, "uuid": "155e96f5-9d64-410a-9dc2-eef0bb9d943b", "value": 50176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "d9eeda16-e272-4bb8-b9a4-47e56eb0b00a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3974a262-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776873560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "c819c202-25c5-49e6-a420-15f224cc0fb8", "comment": "Malware payload (Mirai)", "value": "dd56d772c005df56f704df09eddab770", "object_relation": "md5", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "8861ec2d-4afd-4318-9765-81514e7302fa", "comment": "Malware payload (Mirai)", "value": "75f3e6d6bd2daab6603b52c06a0d238916c9dc3869800b19cc8dcdaa383f337c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "6340ce11-d132-4f32-8947-e6b543999173", "value": "T14E63410ABF611EF7F86FCE3706E52B45308C601A21A83F757974E918FA4A10B54E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "dc285dea-819b-442b-98e9-1388ccc0b395", "value": "1536:nxo6M86eAtqV4dfYvVNufYuI0Kck6n2MFhwbZn:K6MjeAt84VYvhulKV6nvwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776873560, "uuid": "7acacfb4-659d-4158-9124-7ea14827406c", "value": 71480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "fa4e1e65-115d-4c84-ab5c-8b5edc552e4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3976971b-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776873560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "54ed8b15-95e6-400b-82ed-ef2ece38652b", "comment": "Malware payload (Mirai)", "value": "cc982e122674279b85ee0ca2044e78ec", "object_relation": "md5", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "c921fe4a-c160-4cce-b232-6d448bf23472", "comment": "Malware payload (Mirai)", "value": "ac98429bc3b61be71bbb6e864d568ee8078b53b1889532cb1b29d0284bcdd501", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "91fe8b23-2869-4637-b840-1c6834520dde", "value": "T1AC63501E2E618FADFB6D873447B75E21F24863D212E2C640E15CE9015EA034E785FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "979d325d-0658-42a4-899e-30e935b7515d", "value": "1536:qZSWtG1Oyu8jDZAjvDSlgCziwZwnfwbZnD:+G1OMlAilgCziwZofwbZnD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776873560, "uuid": "5b7395df-3b22-4db0-9360-d92dd94ccd55", "value": 68008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "c813f706-94cd-4b1e-b645-ab3fecadc6a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39771ba8-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776873560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "63ffa835-ff51-4540-8073-293f4e82fd98", "comment": "Malware payload (Mirai)", "value": "e5825d9fc77d0ed0797ba8eb84ed3dee", "object_relation": "md5", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "f0f99c6c-fb3a-453f-a09a-2c1af8031982", "comment": "Malware payload (Mirai)", "value": "93dcaa659a7c7c783d36b514466f1495d4a0dabd232f09a6d15964b7eab2e4c6", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "a00ffaee-abba-4239-aaed-e1163b451023", "value": "T1BF33E845BD829906C6D843B7FA1E42CD331173D8E2ED3227DD157F12BBCA52B09AB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "d9a0c98a-7fa7-47d4-aaf1-35fd430931e7", "value": "768:D+/lwk5gcxOTLDYr6Etl35agtJFTfW+Qlw+3i+5ObXdVs8nnaCTCuxDMiBwbZnU:a/l3gcxOTLDYNbwglqO+3+8ya9awbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776873560, "uuid": "34f124c8-4d44-4813-872b-c086e21064bb", "value": 51600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "3dd055f5-6c47-4c05-9814-c85a2aca0c36", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "397aab9e-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776873560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "e37e60c9-7854-4030-a503-357f170f43c0", "comment": "Malware payload (Mirai)", "value": "0dd7fb53707fb9376297bc9f8b89f657", "object_relation": "md5", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "e0cb8fe6-3845-41b9-bd6a-d6c8dc3592aa", "comment": "Malware payload (Mirai)", "value": "6edd5efb2fdb82a7eeb10b78c0a9fdbe1f8720609123e1a398235bccfe3b10bb", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "3734dcf0-0526-4492-8e91-f5fc4cb67ce6", "value": "T12173F74AF9829F10D4D913BBFE0E018D33536798E3EE71129E216F1167CAA5B0B7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "501f36d9-0d1a-47b6-97ed-06ddf5c7ed9a", "value": "1536:Kdny3zwiiIhnp/1U1B0n2oDYIVn0nMoSSYB48qllS/icIwLUCwbZn:xjwFIhpe1B0oIKnMoSSYBVFIwoCwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776873560, "uuid": "eb43c174-706c-41c0-b852-85480c9d0703", "value": 75608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "68b9cf7b-50bd-40b8-9fdb-fb9eb09a1436", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "397c041f-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776873560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "058a9056-2d71-4285-8924-3ff6fd9203af", "comment": "Malware payload (Mirai)", "value": "9fd092d17b406eb19125bfc5dd1e5950", "object_relation": "md5", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "16861eb2-39d4-4bf9-bd9c-86056367dae2", "comment": "Malware payload (Mirai)", "value": "73407056f2dbe3b7e67ac9fee0ce2fa6ccfa6642e9847f0f9a1f405fa3769fdd", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "bbf66516-0d07-4779-85b5-01824675791e", "value": "T1D833E845BD829906C6D843B7FA1E42CD331173D8E2ED3227DD157F12BBCA52B09AB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "c2f462de-02eb-469e-a023-73f4a0b4c618", "value": "768:5+/lwk5gcxOTLDYr6Etl35agtJFTfW+Qlw+3i+5ObXdVs8nnaCTCuxDMiBwbZnU:c/l3gcxOTLDYNbwglqO+3+8ya9awbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776873560, "uuid": "7f28dd87-76f2-4c5a-a9e1-b50b6135ff6c", "value": 51600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "7f36e027-e0b4-4cd1-9022-7408cb2a4955", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "397d8881-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776873560, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "ab1b0bab-5b2f-4246-b7e2-986a89102756", "comment": "Malware payload (Mirai)", "value": "d77b588812996fc4c450388517e543cc", "object_relation": "md5", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "8047f910-75d6-41da-84fc-0185ca4ede9b", "comment": "Malware payload (Mirai)", "value": "77ed441fe35a4fca90fd19fc4b2fbefca470ea928f233a5586fa6b0bf6a8285b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "1a0e2c03-1300-4382-b04a-e3ebed2afae5", "value": "T14253F946B9829E11C5C807BBFE1E118D33137798D2DEB223DE116F11BBCA56B0A7B4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "10de4421-a84b-4f87-a671-d1d394f2d377", "value": "1536:Qxnj8zEyaRD6/8MDKL8cC6ePoLxrLN+PfIpirX/CFEbwbZn:ySEJD6/z68c9L4X/CFEbwbZn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776873560, "uuid": "8e7e25c7-fb9b-4ada-9203-beeb345c3e41", "value": 62632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873560, "uuid": "0da80339-519b-4445-9198-43b3a47c1f03", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bc304a0d-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874209, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874209, "uuid": "77281f20-45ca-4440-b67e-26e9a4322080", "comment": "Malware payload (Mirai)", "value": "5a10f4aef93d485dc8a3b71906471a48", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874209, "uuid": "148894df-1a45-4e00-9d26-ada2ce6e6f7e", "comment": "Malware payload (Mirai)", "value": "ee35e97129adbf882d22489c5e1feff97ba3fa2f03d2fa397e08f648c1f6320b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874209, "uuid": "dd7aa5a5-6df3-4675-ae3e-21c630837bf3", "value": "T1B8912FDE0590EC738DB5DF01336797B090C4CDA738E7EB6CD88C386588A4954B2AEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874209, "uuid": "9c170543-ff53-44db-9e75-3971c45dd875", "value": "48:R0ZTWe3DxR9TWGesWJ9TKebb9Tdeyi9TuevD9TPeUc9TTeYo9B9TaerD9Txem692:R6SDWjZXAsYO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874209, "uuid": "05f29fc4-8310-4c71-9130-2c80f08cdd7e", "value": 4335, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874209, "uuid": "8e8e527e-cdf1-458c-a7bc-bc6d90a7a69c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcb8aa8a-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874210, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874210, "uuid": "0b956268-8831-409e-a4e4-f952d1fcc346", "comment": "Malware payload (Mirai)", "value": "b9d5ecba445ff37df2770a870181baba", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874210, "uuid": "0c471297-ff68-4404-86d6-4d3ecb04c002", "comment": "Malware payload (Mirai)", "value": "85164fea465e06401fe7441a11df99c229f4c37d3fd80050e906532f80df9fd0", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874210, "uuid": "1d639bf2-0867-4a19-be81-ddbcc7339719", "value": "T184B56C43E683C0F1EA1206F11117F77799399A190136C9A3EF98AD29AE71742E71E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874210, "uuid": "63f81523-c518-437f-b76e-76d27b1084df", "value": "49152:mwW6AxqDFU3s/MzrKLvQEMbMmeHWbhOpIkV5L:1AKUCVMa9pI4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874210, "uuid": "4e82f18c-3493-4fd6-8dce-fd20f0e96be8", "value": 2411388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874210, "uuid": "dbc57933-14b9-4b80-a89f-7c252737ebe0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd74f343-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874211, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874211, "uuid": "3f6ade71-9003-4008-9085-20ca5800a716", "comment": "Malware payload (Mirai)", "value": "9475dcf1deda59469e6ed7244d066a8f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874211, "uuid": "2b79353b-e1e6-45b7-95c2-dd217261c3c9", "comment": "Malware payload (Mirai)", "value": "aed006430f23964e3ad5d4d23665da72d838ac160f3909f8b35d6d1937b015fb", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874211, "uuid": "543b7e99-cd93-4139-9767-d393a9ff6f23", "value": "T1D7E5F81F5E319F6CF7B487344BF34B34D7AA22D617A1D980E1ACD1085E6025E681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874211, "uuid": "3f4790ae-647c-4096-93d4-b0aace098ec6", "value": "24576:UyLWBpYoRsWXLnH2YcsV++/ApG+dkTmxMU+RtBvypk8uBATgLjyDg8zH3o1KTIAM:lWjaYKwmhZxMU+ypkNonTkivPM0Dc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874211, "uuid": "951f74ee-f707-40f2-bc22-0a9e9007d96e", "value": 3168540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874211, "uuid": "1d683f24-9e7c-424b-b3ff-a99956974eef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "becd45e1-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874213, "uuid": "7dc388f2-d8ea-495a-92b7-27fa133118df", "comment": "Malware payload (Mirai)", "value": "67c3e4a52f62fadc345ec09309852cb8", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874213, "uuid": "0fee6e92-f062-43dc-b4d5-2c3cf35cc2fb", "comment": "Malware payload (Mirai)", "value": "db719a2572a96ce8486337f04ca258ef0f26c26e8cce4a7612db85b3b5ee70b6", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874213, "uuid": "fd4d1f06-c9df-43dd-b3fe-ae9b5ebc9b4d", "value": "T18CE55E62ABC7DCAFF7A903B506F389B4B3E8A15231758DA1C36F76061F251A4450DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874213, "uuid": "c6734034-42a3-49e4-b72f-9dbb0f35d45f", "value": "49152:5Q48j+bRARRNAAmgsDY1YQK62+HoyErCVouPPKqTF:iRNAAmgN1YQK62+HoyErmouqqTF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874213, "uuid": "79486e94-e193-42c8-abe9-743640529a84", "value": 3081864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874213, "uuid": "9fa09072-543c-4778-b8f7-7a6fa244f7ca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bed901c7-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874213, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874213, "uuid": "cb2ecfcb-2c30-4e30-9e82-f3768dfb48db", "comment": "Malware payload (Mirai)", "value": "7e6b06f8ba802a24876a64bd203a33f1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874213, "uuid": "fd74bba6-ef8a-4acf-acb6-d52bd4b3d98b", "comment": "Malware payload (Mirai)", "value": "6ca85008b331be70d3da51ea4e2af8ea497b644bc577fab2ade1fbbb3b869dbb", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874213, "uuid": "db7cfc72-9eaa-41a9-a1a5-15e9bfee45eb", "value": "T150C56B55FC509A56C6E096BAFB5D828C33232BB8C3DF70179D0487743BDA9AA0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874213, "uuid": "a091c644-e2df-43ff-8f3c-e591c33e7ffa", "value": "49152:19MgfUu8HXRK3bOB0X9DGI8wIZXLTlyZWvPla:19ZUuqRUyB0cXwIWZWla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874213, "uuid": "54115061-b984-45b4-ab67-bf868583675d", "value": 2498452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874213, "uuid": "0748998a-999c-4270-8707-733f87169bc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "beea8227-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "988c5c08-50c9-44a5-8cb5-bffbac7f8315", "comment": "Malware payload (Mirai)", "value": "57f391891b1ad2edd0d6c7a3e5cd2898", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "232973d7-f0be-4654-ad86-ad142332b268", "comment": "Malware payload (Mirai)", "value": "3330c958ec0b4802df9da7eb7ff8c1b5b0ee6571ae71868b553f52bcf930153d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "550e66ca-c74d-448e-9e52-a9185149b155", "value": "T16DB57C03E683C4F1DA560BF4125BFB7B893699164121C963DB98F929BD72312E70A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "e26aca34-d502-44af-ac86-2f2315da2506", "value": "49152:OPLPR3ADgmDy0mAvIy3c2bAp8kVwBKW+:OPd3AMlAL35kp8vJ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874214, "uuid": "63797abb-bf6c-4d52-8350-afaef9a1c33b", "value": 2411928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "aa2ba754-9970-42c8-ae3c-2bf5065bc335", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "beeb9998-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "99e703eb-ebf8-4579-b7e3-e7c9fbaf73c6", "comment": "Malware payload (Mirai)", "value": "f726cc708a2945762cd1abb647e8acae", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "7ee95fa0-e1b4-483c-b7a0-1c0d3b02bfc8", "comment": "Malware payload (Mirai)", "value": "d686d4eac5359abdfc36920c05ed1e93ac7cde63840499f3de2d46934a226935", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "09d5b97e-291d-4fad-a01c-21b42ed75cc2", "value": "T179C51844EAC740F5FE470E718167F33F8B346B05C420CEAADF94AE16EA3BB1651192", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "0a8769f0-b2aa-47f1-b131-3f146cf7c00a", "value": "49152:O/rmiMOKPzSHUSXUWoXRhv5h7yE+xaV38lJTYBhb0kupRkVng:O/rmiMOyzS0xVhgxlYBhb0HpRh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874214, "uuid": "01ccaa90-9bab-4115-b42f-f6e77c90f157", "value": 2554232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "0737cad5-19a9-4243-b5cf-cc2783f740f3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf022fbd-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "1f80fa07-f13b-45bf-b873-8662c8f9849f", "comment": "Malware payload (Mirai)", "value": "a1b9214fe3e8f7bbce39cf24e2ce664f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "74a9b0e4-cd10-4d4e-a401-6ddb8cbac15c", "comment": "Malware payload (Mirai)", "value": "89828007d33066d1b3cae71ade5ca83e86b63aa756ef43de07f62e3080452d98", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "b9a6442a-5350-46e7-aca6-9ec1bee14851", "value": "T17DB55B41FD51AA56C6E0A6BAFB7EC28C33272BB9C3EE30174D044734779A95A0E3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "35afebca-d856-4a55-ad75-017abcab8d11", "value": "24576:feK2g5V354F4MEXviHzp4dvY3HnB2FBXcEzDi5afeWnnW4x7L/C6CsgmplvoupWg:feKvMBzCdQ3I8EzyEW41LqlupWvPleb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874214, "uuid": "3f88a722-9eee-41f5-9de5-e7356116c1e6", "value": 2494268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "ad638e1c-e7b2-4bdc-acfa-80a44f3599e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf245b6f-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "5c182bd7-8a61-418d-a0da-05456b7c270d", "comment": "Malware payload (Mirai)", "value": "f9c91552a6ed99cc410f917c83b203c5", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "baf80c59-00d0-4d50-9bae-066bfd4cf8df", "comment": "Malware payload (Mirai)", "value": "0cc67b0dc8890bb9bb2980f02a1e575009b3d1216e559dde2348dece458c8a13", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "70347cd8-3a52-4870-9848-c04e043acc3c", "value": "T196E52B156F900EF7EC6FCD3356AA4B02258DA40622D53F36B878D914FA5B60F4AD38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "78f891f7-6eb8-4d4b-8064-8cad5972b17b", "value": "49152:BE2tJjFn98+8bAPOg560fJj5uy32MPZNYy+BEzR1pOvPB7:xJ9qgICHJpOB7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874214, "uuid": "1ff8a863-6137-4e0e-93d4-dba833803869", "value": 3164444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "13f23a1c-51fa-4244-a199-97d25ecc121b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf2a8626-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874214, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "521f8ab4-24cb-4b9d-b674-d19cb2042e01", "comment": "Malware payload (Mirai)", "value": "9e7fcdc4561faed3f88fea71501556ff", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "0acdcf6f-d96e-4f75-be9d-689dff4421ad", "comment": "Malware payload (Mirai)", "value": "11101abc98f29e46cd16022395274c302260c69cdafdd9138bf025e24c3493ce", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "d5e3e33f-9546-400c-bf6b-6388980e3909", "value": "T1A9C56D027B1D09C7F1A71DB0263F17E9C7AE8AD631F8F186254EA9CA1375E3012467", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "bdfcd9c0-5c28-4331-af68-801ab7f13511", "value": "49152:sT2jc7PrVfnM2R/ejhTZQZpprBZ6TW51GukHrHqdaYZzrJvP1Lw3Z:sT2jcDrVfM2R/ejhTZGrB0TW51GukHrl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874214, "uuid": "05cae5a2-86f8-4cdd-bf6c-4ab96b16e805", "value": 2728204, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874214, "uuid": "dbd2e35f-500b-4a11-89af-1493cd935c39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c19269e2-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874218, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874218, "uuid": "728d3a62-0934-4373-9150-ec454d7a4351", "comment": "Malware payload (Mirai)", "value": "d000e05d599054a9a33651fdd496ca68", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874218, "uuid": "422e106f-607e-43d8-a32f-9a00046f3efe", "comment": "Malware payload (Mirai)", "value": "916e6a3aa9f29d73a22c73d18fd208f2d5d5a170de5460d629c603ab1d37132c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874218, "uuid": "5d059c0f-ef28-4b54-a177-36df2af4ebb9", "value": "T153813E9A0591EC738DF5CF022757677450C5CE9738E7DBACC88C396984E4910B2AFA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874218, "uuid": "daff4bdb-2cff-40b2-8e51-524940236de0", "value": "48:RSlWS3DN9lWGSsWv9lKSb+9ldSyQ9luSvo9lPSUo9lTSYo919laSr+9lxSmI9lYY:RdlOKzOlXAskEj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874218, "uuid": "c79100fe-c97a-42b2-8899-820d32dd795e", "value": 3969, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874218, "uuid": "cbf3b514-4f91-4a4e-9915-448567cea6f4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c24da09f-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874219, "uuid": "14f343a5-8dae-4cd6-8aa7-51cdda8fb44d", "comment": "Malware payload (Mirai)", "value": "a4fa4f65e8243ccc33343037e5e4599d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874219, "uuid": "90c6bac7-03ff-4483-99a6-2e36ab7915aa", "comment": "Malware payload (Mirai)", "value": "4cfc6b0aa7599aabbdd960417800d02b7f8cb6289ce28b1aaf34a988232d75e1", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874219, "uuid": "5587ee6a-e629-4c7d-a3f0-cec1f72ff038", "value": "T1B1B57C47B708B9BEF246733784574A0E24047F12C0815F33A2B5F5AD5E7A1A91F3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874219, "uuid": "7c118a71-164f-4f97-a83d-749cac06bb74", "value": "49152:qjN24aVXK3PqtE38WXH0xH9qHvZbhrBk9:qjN2FPi84zHvbBk9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874219, "uuid": "9273882b-28be-4666-8ca1-9aead59e4239", "value": 2322396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874219, "uuid": "e237e96e-52b0-4306-835c-a24a1c4e004f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c25faf06-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874219, "uuid": "07820d4e-597e-4ca2-97d2-7055ca1a3994", "comment": "Malware payload (Mirai)", "value": "0c37da3f52942a264646783385d36de1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874219, "uuid": "0dd174d8-303c-4c11-9102-f1927d6bf2b0", "comment": "Malware payload (Mirai)", "value": "b72cec8422a5793ec346297b19c1ea8b3176b5ce345115388d679c5ca5eebdf4", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874219, "uuid": "9d99c76b-033f-4c8b-bf88-99c38684010d", "value": "T16DB55B41FD51AA56C6E0A6BAFB7E828C33272BB9C3EE30174D044734779A95A0E3F5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874219, "uuid": "c117688c-c4ed-4010-9cda-10f25bc8a4c0", "value": "24576:3e38USshHX5I7u/QsidPg2cJxnVDD5gmDHMd5b3mJzK7C9vu/vKFA7Sso+pWvPld:u3oumdI2AAmYUW+v8s+pWvPles", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874219, "uuid": "6f47b06a-7c24-4bca-b605-9b2a9dae33ad", "value": 2490172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874219, "uuid": "8a1cf81b-3c49-4e64-a53a-084e418ad6d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c26b4139-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874219, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874219, "uuid": "17e01de5-14ce-4d55-bf4b-d3f0ddb25fbe", "comment": "Malware payload (Mirai)", "value": "d31bbe9efb07914aeb131fce4e8fbf84", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874219, "uuid": "3fda1479-d70c-4596-ae6c-f6c3998c3921", "comment": "Malware payload (Mirai)", "value": "4c7d25d925c59540f5a62ff8e36f80e5bc9a06a63d20f8d60f2746081de91e56", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874219, "uuid": "a88c0333-a120-424b-9111-84843d2c6d2e", "value": "T17BB56C99EE0E3D42E3C7E27CDF4A8BB1313BB6A8E32280B37552415CC0DA9D597B16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874219, "uuid": "70438203-705d-4d48-8377-6467b7d170c6", "value": "24576:UFW87Yw3csAB7MNT7tYYIN3hCgqGDlf0lvta28eCEwe3q3JTL6x6xUCnDNOKroaB:i0BsAxPxboFUgn5Knqat4yPc07PZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874219, "uuid": "8ebab1d6-75c6-44c4-aac6-45da90cc5b8c", "value": 2489264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874219, "uuid": "fc10f7f6-10bd-4bba-8330-77517e6354a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2d4f402-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874220, "uuid": "b2d89ee5-44ac-4537-a5d5-8d794e3e2a01", "comment": "Malware payload (Mirai)", "value": "aec0c4602343d92aa8d953ab8c647356", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874220, "uuid": "641c4012-4d73-4895-8acc-ac2c2cdbd883", "comment": "Malware payload (Mirai)", "value": "38398e5b916b6c1181ae143f78e35c69278b27a9e1746d2fc540528e87a01df1", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874220, "uuid": "b6cb93e0-348f-43dc-8fa0-ca5b2b5a9ef6", "value": "T1EDC59D62D968AFEFC526D171A538CEF20B53680052160FF639A6E3B44947AC2F3067", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874220, "uuid": "6fe1f6bf-d7ea-4e5d-ba03-8f60dbae3374", "value": "49152:ABrUxGV4sEICYEdkFlPDgl/yLKPDw9v3lQ+ItB433oRVJmvPseX:AGEA/4D32JmseX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874220, "uuid": "7f929e4b-a98e-4f8f-bbb9-9c8eee7822c6", "value": 2694952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874220, "uuid": "3b8d7839-884d-4912-b5e8-532fcbe2511c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c2dc6fbc-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776874220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874220, "uuid": "7458d067-a36f-4249-8678-cab4bcd39cd0", "comment": "Malware payload (Mirai)", "value": "87d029e99b7660fc15a050c392ad1068", "object_relation": "md5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874220, "uuid": "1a2b7b84-1db5-4ff4-82b2-164e2792a4d6", "comment": "Malware payload (Mirai)", "value": "fd16766c7a55c6f2ca4ead37697d0945fad58a816b405f3b42695990fb8e9554", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874220, "uuid": "200f1e67-1162-4f39-99b5-44fd4b32f15a", "value": "T125D55B41EC509A53C1E15BBAFA7F828933332BB4D3DB70164D189B706F86B5E0E3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874220, "uuid": "c8d34be8-c3e5-4d9b-81f2-6f107c03db4c", "value": "49152:0qYfxPp8Y5ZUdes34lSguvSZWvPlaAleeyqKya82xyPgAKR03:0qYBj2db3ZaZWlaAlryqKya82QPFKR03", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776874220, "uuid": "c2d71773-e8fc-43a6-a5c4-f4a8b6273f30", "value": 3017609, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874220, "uuid": "481002cc-f57c-4e9a-a0eb-17a02f099245", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad25ebd0-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "97dec103-4ae2-4fdc-8a4b-926c96126edc", "comment": "Malware payload (Mirai)", "value": "90d758a392a304984983d17396f1a06a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "eed1493d-bba8-483b-b660-c86d249379ee", "comment": "Malware payload (Mirai)", "value": "6ed3d010b652e550ac99d4b147503795133ca0f610046ae95f8b3750bec3b2f9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "ad436883-1686-40f6-a855-d2ab413f1b63", "value": "T13DC32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "18ed0903-ea37-4837-b8db-bd9f74623480", "value": "1536:68B72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dLJ:6eB4exMF7oZKJnCNYaVJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "712fa6f6-5572-4c78-98de-4c45acc2bb8c", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "890278f8-1298-4b97-81be-2b9c24989ddc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad25f6b5-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "c37372e2-3235-4b95-9955-c0d55b8cec33", "comment": "Malware payload (Mirai)", "value": "1375ff444c167b642a6f7cc47ec2cd36", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "b3c6e978-b680-4072-9e0b-3f649495b866", "comment": "Malware payload (Mirai)", "value": "16d40bfe0ecd3cb3c2f7f93e1b5578b81be87ec349d065f174d8c9f01d5cb660", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "9637a5e5-de70-4159-bb68-d62941b1813c", "value": "T1B714C70A3A228FEFF56D877147F34A30976976D627E29684E26CD5101F103CD681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "41e80d23-915c-4c06-81b4-8feb6e76faee", "value": "6144:456eQCbeoufx43df2dp06GtCqjYW8nY1j20WI:Dely43dfap06GtCqjYW8nY1j20WI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "b73f5657-b27e-424d-82fb-c365d4b11628", "value": 202077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "81e21228-7534-43e3-9bfe-67589b52da79", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2b1ba8-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "6a235f69-30d3-4af4-aa46-6453411dbee3", "comment": "Malware payload (Mirai)", "value": "f956fe75abe817177a81123ef2db4ac9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "a2880d0f-3bee-4080-8edf-bc72bcc734c5", "comment": "Malware payload (Mirai)", "value": "7622a284a69aeedfcd4173e5571d91ae6efe49c6b22ce703ae218ba7dd26a877", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "693639a7-27b5-43f2-90d9-d3210fd1eaf8", "value": "T1D0B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "53bcacf0-cc4e-4e5a-a125-d895446750f2", "value": "1536:TUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45ZvC:AixnUHz4Z+5ypkn3E8C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "884d041b-0312-4938-89e2-1c32a1b973e7", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "e20fff11-d5e2-4614-b512-5a76abce6bb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2e5bc7-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "79400899-f8aa-4f2d-ae0f-eea3eccf73fd", "comment": "Malware payload (Mirai)", "value": "09a254c33d6d90dd3f81dd6bec8a7586", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "b192ee73-2d6f-45bb-a8d7-12aa03c79114", "comment": "Malware payload (Mirai)", "value": "428ef996926ac99bd697b34482a139117fe8fe113ed6ac16a8254d6cd53a998c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "fdf53a8c-da6f-448f-8d98-b6d4e9fb0af4", "value": "T1B0E3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "371934d9-569f-4264-9ccb-87657aca3f07", "value": "1536:p+fTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4Vx7dbK:pYlybKpzEOfGQ+vEubTt4ouftL43dO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "d3e55c03-4b04-46e6-baae-e720a496ad80", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "4361ca17-f2b8-4341-900f-1ace2c6a6d1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2f490a-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "4212a404-4cd6-4ccd-81a2-b873223ba4bf", "comment": "Malware payload (Mirai)", "value": "a9cae0f2350f48350ace1528f3a5be84", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "93783263-8fe0-4bb0-85fc-d45e1e73301c", "comment": "Malware payload (Mirai)", "value": "fe818d1efd3547dd679c67eee784b57565484823ffa4a07a66c9719268a6dc48", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "659c5799-94cb-4c60-ad0c-b20120819af5", "value": "T1D331038F60F4604BC5DECE0070E58DC8E305999DE1DA2A3ADCC1AE67CCC9D547499B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "b0228e50-61e9-48c6-9cf4-062f5e035cdc", "value": "48:s6+6y6w6i6/6Dq6o6U1l6X6c56j6ra6k6q6w6C6D6e6E6Wo78616Dq626W6D6K65:pbPtfiDX1U1IKcM2TxXt/W7RWw4rjDWJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "8e2c4f75-a169-446d-9c40-84b186c44c06", "value": 1873, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "7c91eef1-ebf9-47c8-9d2f-123ff4ef6f8f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad2f717c-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "d4ba3579-67e3-4aa5-b732-6a503b53f778", "comment": "Malware payload (Mirai)", "value": "7e3d38ab18289cac610f163d5d940d3b", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "b60b9488-43c5-4062-88b5-7b80a3c11286", "comment": "Malware payload (Mirai)", "value": "d728ee9aac7be7a04b6670f3d24f10690b2122b0c900c86590ede3b55e8e115f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "6c0fb5a1-256c-4626-9b6a-d0ee4e444dfd", "value": "T125E3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "2ceda279-12d4-432d-99f5-8bb526844e74", "value": "3072:axjJw1Cc/0s6YAPwenUr48pzfR+Jon3y:axlw1xAop0YfR3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "f909faca-ba2c-4dd5-9c77-7d99463b5310", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "93f37374-30ff-476c-a32a-0b51a6ce5378", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad326ecc-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "67a1499a-88bb-4bb2-8235-1436f627c580", "comment": "Malware payload (Mirai)", "value": "3ba449cb1545b925ac2000f453b57d3d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "f490fb02-1000-4598-877d-99946e94b3b2", "comment": "Malware payload (Mirai)", "value": "98370a31aa0976e7291d5c5087a8c9770b2927e8c3399bc14a2402d01bc5839d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "1735ec80-f393-4220-a876-1b54410a2d54", "value": "T151930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "783126e9-85d6-4051-a471-cd51f0b1cf9a", "value": "1536:wqnZK8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1Ydn:C8NUv5nTacgzafVAwe4BNRIbT2gXy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "2413dd71-418b-4fac-ad2f-f03f4675b67b", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "bdc6182d-41a4-4e26-99a0-d957b40406f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3366bb-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "3ef0c9ac-c098-4c72-81f4-6a2cb938cf39", "comment": "Malware payload (Mirai)", "value": "8e5580c5555ffddf58f1c4dace1e790c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "3de941e0-8961-42dc-a4f7-d1041dde5d55", "comment": "Malware payload (Mirai)", "value": "9da85a71f77b26fc02997ff08981cd2a497b155b3515f9179edfb6e910e6aa68", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "16601c4b-ff2c-4a2b-9660-cfb645dd5e67", "value": "T138C35C1775D180FDC8DAC1B49FEAE226EA33B42D5138B21E27C86A671F4DE205F5D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "cbc2a64f-2a7d-4170-8237-cb11a130a23e", "value": "1536:UrAFmGO0Ng7K+9CIiqDG11Bs0+Ndm1/lAqK3dtNI/xSeabK3J:UEFmSmviqS1Bs0+Nd6lAqktNMxSNbmJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "21d4976d-c620-48d9-8e38-19a3fff4472e", "value": 123464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "18580106-19f9-4074-a4d6-05d12acfe840", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3456b8-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "f9e5c233-86a4-4701-be95-23775db892d0", "comment": "Malware payload (Mirai)", "value": "a968fbf0411c17d02f15c44cf6bc6fbc", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "0ffe82f2-a82f-4d2a-a8e8-fd996f34bf14", "comment": "Malware payload (Mirai)", "value": "741712f0d9bcee88173d0111a010e3d36da165c91ab82d01f24138868dcd5fbf", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "fff8a94d-e2d4-4fca-b65c-69d71eec2b36", "value": "T1EE32C517A7BBAE1BC4D037770193072162E95F916024472FBD0D1C8E6E9A3412D3FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "d78b01d3-47b9-4d19-9004-926b9483a942", "value": "192:xvrOR1CQOsz1NxfAz+OH9iG0GhWaDpU/O7Q89AGSybVqeif:xvrbCzfap2GwIU/kwGS6Uf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "11f1e275-6a07-47e8-867b-fc600976afaf", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "e0c3862c-6b23-46e6-bb00-a222d6fd2541", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad35bd23-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "6d245699-5301-4638-adfd-90d2a0633988", "comment": "Malware payload (Mirai)", "value": "19612fe60996113bafbd1be3f3a82d5e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "cb4fe6af-83c4-4d83-b060-160265cd6410", "comment": "Malware payload (Mirai)", "value": "a753a1e79075fef2c8187d54476b21ead408cecc2e68cd89174ff7f342e024d2", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "a1f6d044-6c92-4e14-8ac0-bd11208b69c8", "value": "T12BB30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "5cbcc956-8c71-428f-8c5c-b9fa279ca1d4", "value": "1536:57jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxZ:1zPqF41OUBljSIxecUtCv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "e27ce882-d6ec-4822-9bd6-2eef1be52166", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "4744032c-e6c2-41fe-b037-27a08190941f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3b3658-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "9bf8e047-cd3a-41b6-9926-5679f4e306bf", "comment": "Malware payload (Mirai)", "value": "104605ce5e80368ee1b18b5f6144c4c8", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "acb5d117-ef99-4227-a0a8-45e00a1d75d0", "comment": "Malware payload (Mirai)", "value": "01105c759ffb07de1dbf522a19ccb51746274fddc66661275ca83772c9c0320d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "edbc8b22-c20b-462d-8c2e-5404ced50946", "value": "T195C30956F8819B11D5D151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "e500daf9-04bf-484b-944d-f31b8d208956", "value": "3072:fWD7YhjFMX+maR8TcDeRqQV3tNQYciYTG1S:fWD76aX9aKTcRQVnoiYq1S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "402cb685-4b28-44c1-b1f7-d5d5e12e303c", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "7fa42fbe-2d33-4096-9401-7d3ebbcf75e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3d09fa-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "016671e4-64d8-4262-aa0c-24fa36f29c6f", "comment": "Malware payload (Mirai)", "value": "719d60e26d2a083bf1cbf715a592190c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "3359337f-4d8f-4515-90f1-3ad9e8626463", "comment": "Malware payload (Mirai)", "value": "b606999038c82f8e9f517dd1b40e585d7c565dfd5ad5dba95fc0c4b56546c833", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "bf180ebd-76fa-4e63-bbc1-b63924504b19", "value": "T167A328A3CC762F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "bf0c6ae4-a620-4c2f-9a93-be94cf2cc5d7", "value": "1536:71ufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXAt:wbU2RC4kPCtSzWu3/3L1t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "ddd9af47-681c-4014-8bcf-0bc007dfe727", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "ec15a042-9938-4ac2-b76e-7445a21ebbee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad3e778b-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "7658ca0f-ed7c-464f-b57d-0e8daca9fddf", "comment": "Malware payload (Mirai)", "value": "d185110b26d44625257bc1c6bd94aaf0", "object_relation": "md5", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "8a5eba3b-5b93-475b-b823-dc9020247af9", "comment": "Malware payload (Mirai)", "value": "e25b244b0eec20b63a6361538832c9f86e79f4b91cb92bf12738c15b09085cf5", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "e69384e7-192a-42b6-b30b-da14af0f8e3d", "value": "T1B5D308C7F900D9FAFC0AE7374853080AB230B7A545925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "58d8f2a6-49f6-487e-9518-653b22cbab98", "value": "3072:kSbul4MGHJvkrybLutTK/OwpiZdDoOPVO6V1jbiALNHFIIx:0rybytG/Oyi42VOgLNzx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875472, "uuid": "afde1550-5c4f-40b5-912f-1865f21191e8", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875472, "uuid": "70925465-972a-4d8c-9ac3-a30f05c21f23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81bb8329-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875829, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875829, "uuid": "f4592b2e-413b-4a1c-8771-4f04598df1b8", "comment": "Malware payload (Mirai)", "value": "741f58d7c3bd03d04be00011b1231b81", "object_relation": "md5", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875829, "uuid": "0ea72096-79f1-4d37-8e2b-bc0583606bf9", "comment": "Malware payload (Mirai)", "value": "2bdfc74b900e086c6bb1278cdb72bd4de6b3aea855937f34bd729d21c9bdf512", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875829, "uuid": "a72decae-04a1-497c-bf04-7fefb345cfa7", "value": "T17B14961E6E228F7EF669837047F78E245B5837DA16E1D680E1ACD5101F202DE641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875829, "uuid": "dbcaac70-15f3-489f-b22c-9836b46c28c3", "value": "3072:xFwjJ/XEcjNQ6A2nrILykYQvPwTosD0jIypaTC5GS:xFwjdXEcvrILy+TsD1OaW5GS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875829, "uuid": "4d5e9742-855a-4809-a24d-c3a58be5a46a", "value": 207120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875829, "uuid": "98c07f87-752d-4725-9499-26762bdf22ee", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8637304b-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776875836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875836, "uuid": "7072cd59-551e-40b3-aa36-af5e380b7eb5", "comment": "Malware payload (Mirai)", "value": "9ed0316ca1b6fa720cc0b1a86933b2f1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875836, "uuid": "d23819d6-05d4-43b3-b7ad-2486ef35c3ce", "comment": "Malware payload (Mirai)", "value": "1561dbdb28eaccdb8c7829c72ad30752d6c368e2c3ac9967667f360042313528", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875836, "uuid": "bbbf49ee-3f97-44a6-bcbd-f6acba7d1c03", "value": "T180930A45F9824F12C5D622BAFAAE018D33136BF9E3EA7102DD205F6437C559B0E73A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875836, "uuid": "ce2a21a5-be61-4500-a87a-269e4d1ac548", "value": "1536:CYnRJVNHuzPwJMwYN0P8an6v5M1crno2cCWPOt8CsrapgIbWlg6iiJjcw6bT:dnH0PfwIAfgymrno2/KOt8CsrapWdjcd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875836, "uuid": "83dcd266-38ad-456d-8801-2621784522f5", "value": 92948, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875836, "uuid": "96cb0140-3ad6-4f46-a232-3cbf50abc75a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af847241-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776875906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "f9dd9d52-030f-4edf-9a09-88159a6d5733", "comment": "Malware payload", "value": "649852a6d791c5601d14d39f9db32717", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "0124c194-b8f2-4d50-b6c7-8998425639a1", "comment": "Malware payload", "value": "dc2e63a993d62f77c72102b2a6b5907ae5668b5ebdbd029b1d08c12c14168e2c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "4d179e08-95a1-4027-8f2b-d85d95f19983", "value": "T17CB64D15AC842BFAC46C4A7444EEC95622B05D140BF24B6A75A4FFE9BC762387F078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "990f6ad1-d562-4fda-8b6c-95cb92fddbd7", "value": "98304:L4hCDyAzPikXtD4/Ehus2uQAsIWuXW2R15oPKA1q/eWLFklFcKa:8heukXtxhF2utb15oiYdHPa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875906, "uuid": "80e11386-d810-4450-ba21-33d7a26059e8", "value": 11007551, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "2302dbc9-5f58-4a47-be79-c635e6fd9c69", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af9bfbf0-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776875906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "ba1b68bf-c115-4817-a74f-645098f9ee6a", "comment": "Malware payload", "value": "6dd4af447c05dcb36a21676946d1d893", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "17e2ffcd-7d83-4453-9da5-52d099d92d14", "comment": "Malware payload", "value": "3f735bf0ec885559d5ffc651ba16022e446c18255473cc9a9fae7cd4e3b35f78", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "537cf5c4-6ce9-4d99-ad83-f54792c2dbae", "value": "T10BA68C52FDCB14FAEA43193005ABA22F23314C094F65EBD3EB507F29F97BA9518361", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "c84d0495-e56b-49d2-9ddd-cba021b7d1ae", "value": "98304:cyHBC3ANOe5OyHOxptOZt6dREwUzg7T2DxOnZROwh8D0c8C:cy8bO8yrg7T2DonZgwh8ocf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875906, "uuid": "5e41850b-3713-486d-8a47-447a1368eb04", "value": 10267089, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "52b89dac-11a6-4b62-ba34-9314a68ef2b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afa4b67b-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776875906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "99c4a656-8edc-43db-bab4-b12ca56af436", "comment": "Malware payload", "value": "f6c799ea0de4f00ceb4da5e3f3d56945", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "57122260-fe31-4e0a-9b0c-29669ad58257", "comment": "Malware payload", "value": "b8ed51832e0c153ec4844e8d75c0ea40261a7c107e045ecd35ef0002f40a0c78", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "75bb26c1-b128-44b9-8cbe-386b31adec41", "value": "T1F8A69C42BC1D6473C6C976355FB31294723AAC089BC2C7176A24B77DEDF23488F626", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "19f4f7e2-db22-4616-8113-66515f716cff", "value": "98304:o5zjZuGnfXw5/UZvJ+YwC+PE+8UUSmM3KRzCDATXqtJr:oBZu6zv5R+3eM3K4DAbqtF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875906, "uuid": "d0ad93df-c30d-4bb8-82bc-8bd84f03a815", "value": 9834792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "0fed3af2-da14-487f-b196-141fda9f8844", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afa7ff54-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776875906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "e6649562-1e62-4260-8797-77aa270b8c94", "comment": "Malware payload", "value": "853ef8397e8fec6611e80bb0872c51ec", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "16e47cff-8a4d-44bd-91cb-d2a3fd36e339", "comment": "Malware payload", "value": "8781ce07a4b94e71a205561c2f7523eebdfb12e9afcd56882b8736cb58499f72", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "59156b90-bcd8-46fd-a4fe-338a51825d1e", "value": "T163A66B47B8924952C5E42A37BCBE81C433634EB98BC727576D04EE3C7ABE1990E397", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "a5090bc7-98cd-4cfe-a4f2-1d3de1819757", "value": "196608:scg2aGnzQP52/6g/3cEfqG5vLCqj4w+WWnb:/02/6g/3c0qGxWqj3lWb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875906, "uuid": "b5d05baa-23e3-4337-85c2-c49315286f20", "value": 10205219, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "96d9ba51-4988-407a-98dd-c01d0f553f78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afcab3e3-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776875906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "4527af02-ba55-4d0f-acdf-bc8a19efdeeb", "comment": "Malware payload", "value": "920b10a96e6e50b78c90bf831009f51e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "aa629e37-c907-461f-90ef-13e0b82e0ad8", "comment": "Malware payload", "value": "91f40e048ce741bca5b0c2eb979570ac2983576c85a7bee32647fd97bd7c0a9a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "65f66b24-3047-4e8c-a68e-2e6f08e02094", "value": "T139A67B47B8924952C5E43A37BCBF81C433634EB98BC726576D14EA383EBE1990E397", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "73714dfb-a2c3-4a67-b2b4-2ec9d5a8a633", "value": "98304:oeRgpANu2KiDTCwwdsY4UbEAo49DfW1+TvZFJG5Y0B:oeoANu2KiDGwwdsNt1CZFM9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875906, "uuid": "ed65fbcb-07b3-4115-970f-9db463aae0d2", "value": 10210166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "85808f73-a9fb-4212-bf87-82a6e049653f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afd1ce49-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776875906, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "8471856d-a879-4d6d-ac01-1ce7bfba49d9", "comment": "Malware payload", "value": "b85df17007983461d713b7ddb35501bd", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "9a9cbd21-a84f-49b5-b137-6586251798fc", "comment": "Malware payload", "value": "a0f0d318d17e7593ee642f773b82c975fb1d32f9c47219a4ea9de6f69e17930a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "0e13be7e-725a-490f-96d2-cc129c037399", "value": "T1EDB67B137B28EB0EC61862300CB2DE9467661C8501D7A597B785F319F9F20AC996FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "d45899c4-a597-499e-94c2-543ce64f3a2f", "value": "98304:2nBnI8x8MUaEn6nUjEHY5ORPgRDRsOclHe/SDxJMAt32Gt:uBnHUl6nvHYSPgRDLc9ymJPt32Gt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875906, "uuid": "13a45d87-6562-4601-804f-c34494a9fd0d", "value": 11060299, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875906, "uuid": "d057e7e8-b22b-4950-813b-79b711362643", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf2ec176-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776875959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875959, "uuid": "0416b6ae-c678-4f95-bb1f-312d2e152137", "comment": "Malware payload", "value": "0f26d5a6ead856ef53fc4c705a9ddbd1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875959, "uuid": "1f737c3d-465f-4662-bbd4-e1f76e13b13a", "comment": "Malware payload", "value": "2627d0e6e3e0f073f4e93bdb0c6945c7f7b564232cec79454d828e8fd7269180", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875959, "uuid": "4c30161f-4220-4af3-8cbf-1489cb85d79f", "value": "T19DA67B47B8924956C4E43A37BCBE81C433634EB98BC7165B6D05FA387ABE1D90E393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875959, "uuid": "32cfb342-4a1b-4545-84f3-abada5b1cad5", "value": "98304:7R4okRV31c4y5FhLWZZXZpT8KiExIuRsnXvzc1qJq0MMfwx3IL:7KV1c4y5FhwBZpT8MxIuRsbc3MfPL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776875959, "uuid": "666fed6e-c6b3-4b2d-ab7a-4ada27a454cc", "value": 10207801, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875959, "uuid": "a6677df2-e918-4c0c-a6d6-f2a24cae5df2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3e84c12-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876020, "uuid": "a0784f4f-100c-4f77-ac63-81dac7a08144", "comment": "Malware payload (Mirai)", "value": "27d303dd9fcb13319a4cbc061eac6e39", "object_relation": "md5", "Tag": [ { "name": "176-65-139-59", "colour": "#2abc3a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876020, "uuid": "390af32d-af77-4c25-87eb-0ff2b62637c7", "comment": "Malware payload (Mirai)", "value": "c30a0d9a140523270c92019f5c1435e075057c9ef2816d5402f4a5a0b331dd32", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-59", "colour": "#2abc3a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876020, "uuid": "d6ebd993-33e7-49bf-99c2-da9a491ace57", "value": "T191F02B85D49D1C360E7886139224EB1820811063ABF17BFCD5C4E7604B0B9347311B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876020, "uuid": "cc29fb63-e480-472a-bb10-3bc5b10a0f0c", "value": "12:4Ck129Ov0GyVyy0yQowq9pGyo7Ty76XB+03Zd++5+EwbA90W:4Ck1kOv0GyVyy0yQtq9p9o7Ty76XB+6R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876020, "uuid": "89834bf8-e984-4058-8e6b-5227040a09ed", "value": 549, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876020, "uuid": "878bd84d-6bf0-46cb-ad25-3ef2f20f79dd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c29c1053-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876367, "uuid": "575b1311-772c-40fd-8ddb-f07c437911a2", "comment": "Malware payload (Mirai)", "value": "09a630ba08d29085e9a927ab4bfe4e7f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876367, "uuid": "97fc11f7-f541-4cf4-8bce-d28438626152", "comment": "Malware payload (Mirai)", "value": "8341b1ead69a1d5d342a13164d1623d4c30f9d3c39fbb6dea733e6b05699ca7c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876367, "uuid": "50fd5aa8-18ce-41d6-9df9-36e34802048c", "value": "T193B2C0BEDD848541C2FEEC7ADCAF2B719D49A2C9E2D44F4693109D8C178249B698C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876367, "uuid": "332e6b7e-3eb2-4f89-b647-e0c270a9066b", "value": "384:ThPaByX8us+j+sDmToURNczG4AoJstB8sqRg8eIZxQktgZbBm3dGVW7bDRWGVCzp:9Paqs+asDm5nTPnBnhktKSdKW1WTNr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876367, "uuid": "dac66031-66ac-405f-9929-af3f2dde7c0a", "value": 24220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876367, "uuid": "29130424-d34f-4b7a-82aa-e5837484bd47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7d962a1-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "5874f444-fcb0-45af-8451-bbd9444bd5d2", "comment": "Malware payload (Mirai)", "value": "b164aa542e360fb9c5c7da648090a63f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "0117a0f6-5726-4567-8043-0af312d95bff", "comment": "Malware payload (Mirai)", "value": "f0ad98576faf4c79ae557f5c4051796261b56c3031171774f4cf73c792ee8d2a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "aab184a1-e83c-489d-b710-74dd75c35c86", "value": "T198B2D0BC011654AAEEA9457B41FB53C66C720BD0709AECC95CC76AE2CB914F21076F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "7c1e3b76-dda8-4457-8e01-7e9c708c90a8", "value": "384:6EV2wgKkBeHf+yUs+/M5Xr3Hy8/EBawW8J/djaMgqmTJgGlzDpHOw23a+G:XVnWy0E5XjyOfwfJVjadqmTJgGlzDpuK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876376, "uuid": "d22946bf-07ac-41cc-bb7c-a16fcf7f7eae", "value": 24092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "eda0561d-0d8f-41ef-a28d-29897d192308", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7d967d0-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "37138178-bc99-4263-b6d7-670b8c5a5a27", "comment": "Malware payload (Mirai)", "value": "e635095a3de0848fedb8e3e9fa0cbaf9", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "141f4d1f-4c29-4a71-9ba7-def781177fa2", "comment": "Malware payload (Mirai)", "value": "c05dca7c231d66f896d6a018c9ae8f2843b70619bb3a3dabf3f735509913638e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "ab357e2d-5633-4328-8318-22e2a4450e88", "value": "T101133A36FA621C3BC4C599B561E30735F2F6839B24BC4A2B3D610E8CBF65A4036537", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "12b49dd4-55e9-4e60-ada6-de0d2b22f238", "value": "768:uElft9Hp8kr+zO+Yk5X0tp4I1Qw/6gWdt50d9zyIp:uEFt9pPiYk5s1Qc6ntOzy2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876376, "uuid": "3c4c4332-b662-46af-8515-4c8497810645", "value": 44464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "9f0e6878-9abf-4dce-b9f2-9fa44d134a3a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7e5c523-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "7e095e95-c940-4842-b568-d51ba6a66842", "comment": "Malware payload (Mirai)", "value": "01c427f6f0dcbc3b37495b48103c1239", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "6f2627ec-7dbe-44dd-9bef-a524c6bda71e", "comment": "Malware payload (Mirai)", "value": "56e95e081dc4b48c119d15409bd3d7258bb302970835191e1856c020c700988c", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "fc80c8fe-e8cd-486c-b641-05ad10c601ed", "value": "T1CA2307DBF800E9BAF809D77B44A70506B270E3A6059317763367352BE87A2A40477F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "8455c148-8ad3-4ae2-adf8-3a221748ef0e", "value": "768:xNMGZFg2dqx/waa86T2enZSbxR9i70gImhj+tPGGmTLKhgIoXmI3:xNMGZF5aw8G2eZSlm70gImhqt+GddoXr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876376, "uuid": "3e7cbe50-a12f-4aa8-8e5c-3fd3b21d0471", "value": 46188, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "f25f18e1-486e-4dbf-91ef-84906e73992b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7e80c70-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "d636dbc2-204b-4d40-b075-78dba8eb2258", "comment": "Malware payload (Mirai)", "value": "b299b9152fa7eecc2ef4a6a056c692e2", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "16747eb0-cea0-4935-a7ea-3367cb8f626b", "comment": "Malware payload (Mirai)", "value": "9b7d8010b3a117f1944b2bae246c150b008c65d3a5d76346a78a18ad6bce3080", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "eb67925a-a043-4a04-929a-eb334bd4e986", "value": "T16B23F2E48C257D774091A0B8F4AF80CB44005F757CF9BDB2B9568788BD7084687BE5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "ad1d218d-03ff-4348-b564-d2fe844e564e", "value": "768:Jlz/2HAfKhnJBYeSqzT6+570VeSGMq3UirvtOq1T+fHTxAXyiBznCN7z//QdgN:PL2HAf4n1Gk76GttOZfHTxAXv16z//Q6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876376, "uuid": "979bf575-dac6-4b83-82fc-a74dccedb8d8", "value": 48684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "b0df8fd2-dc8c-4702-9632-df551efad1c5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7ed000e-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "669f888a-b1bc-48ab-b841-1db6581d77a1", "comment": "Malware payload (Mirai)", "value": "14d064291855eaf254c7fa50ccd57c5b", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "9536183a-766b-4d9c-9d62-6fc2a2a83c02", "comment": "Malware payload (Mirai)", "value": "bd659035de64932c9ac4461ebec6d2cf00c2d93a3a7e3c7819426f6d4d4352bb", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "ab10cf9a-5c5c-45de-8ff5-ca4e16339971", "value": "T123D1ADA4D1302471F83ACAB3102FA8F77716C12AF6D9047B22A067563F5318EEB130", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "df2ad035-a70e-4bc3-9a8c-6024f6332af9", "value": "96:3zpN+Ig9R0h+zp4wlEAv1XeBy9q6fvo2nsOvJL3cUapdYpr+sOMjR9fuSAj:3V+wh+z7zQBy9qAoQdh7VapdU1j2Pj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876376, "uuid": "3a633a6a-b254-4c3f-b273-96f19753cfb0", "value": 6500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876376, "uuid": "d4aa831d-128e-4568-ba27-b74e1f14e23c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c93c6e57-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876378, "uuid": "a47038b4-d9ca-4819-8155-eedad0d34436", "comment": "Malware payload (Mirai)", "value": "4a3610398bf12fbef389db488bbf545a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876378, "uuid": "156284be-f8c6-465d-bbcd-ac5f07366d75", "comment": "Malware payload (Mirai)", "value": "df3599e2a986e613a317a404d39e88bde21557d784359c1d4a560d5cc7aa6cb6", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876378, "uuid": "95fbf5f5-48fe-4687-b60b-5011d85a4ee1", "value": "T134A2BF7CC07D2B95F5ABEEB01C1B63D05BE94B5D31E68DE391115F00A6461336A29C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876378, "uuid": "554dc224-2984-4519-a535-69f9ed89e17c", "value": "384:A96kxojV9aaEoJ3hZNpdznTG4vCq7YAfRJm2eLSM4uVcqgw0Og724kmWT:UyjV9ax4FpdzNeAfHm2iJ4uVcqgw0X7k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876378, "uuid": "aca642ac-3b68-4b08-8e92-88a504c63e31", "value": 22796, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876378, "uuid": "4131b064-a369-43c7-87f2-7708064daf3b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c9473e8c-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876378, "uuid": "a42ab2a6-dc76-492f-abc7-679b9ea7a383", "comment": "Malware payload (Mirai)", "value": "ac434442e1f0837e003068d15b31b27a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876378, "uuid": "b0c3147f-da44-4293-b485-7f965c786370", "comment": "Malware payload (Mirai)", "value": "ee2a12220aa049365a4b8e216327c79e7b6c7da3e11d4d22f5a97e88e2f4bdd2", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876378, "uuid": "842c89e1-454a-4337-a4b1-e7260fcf7b7e", "value": "T13FE25CA3CD252F28D1A9CAB670709E355763A010918B1FBF1A79C26C9493DDCF5863", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876378, "uuid": "90c8b196-3eec-452a-8831-ee9bba98952c", "value": "768:j86iKTLy5gaKAEaucCiNi0Wdkfj12NNsap9ZClLSI3:uKTLy5bZUc06cNNs+9ZCxSO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876378, "uuid": "27c60a06-ef34-46ca-896d-29034ec1c465", "value": 32852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876378, "uuid": "062b3470-76d5-45a1-96ab-a67528e401b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cafa029f-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776876381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876381, "uuid": "b5a97c1c-4dca-46c3-81c4-2356e2efe4bb", "comment": "Malware payload", "value": "100130b4adf6421fa9706d9b1eefe29c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876381, "uuid": "e8d99010-894f-4e68-be23-b226a22ac24d", "comment": "Malware payload", "value": "3a7d26aa627ed2c274c29a2ce4a2137595882bfb77083eaf1e5b70e03dfaa344", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876381, "uuid": "bd7a6418-7670-4f23-a2c8-bf16d34be469", "value": "T19CF0E28A038723370F64868B7139D90D20842022D58DAB6C759DEB64BB0DA497B53B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876381, "uuid": "9f8485bd-736c-43d2-9ed1-9e9e8b5b1125", "value": "12:4CkEk1ETHkEce7pB+X3Zd+/5+XRwbA90W:4CkX1EDKe7pB+Hj+/5+hbGW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876381, "uuid": "dcbd287c-4bb7-489d-82ac-41556cb73406", "value": 492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876381, "uuid": "17586cc3-832d-4419-a251-95c53a04e7cd", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0b1e90a-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876445, "uuid": "49e649d7-80bd-4036-a691-78e77caacac0", "comment": "Malware payload (Mirai)", "value": "e1ee862515433a97a6ab6f1d5dff5bef", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876445, "uuid": "9aee2359-fd15-4434-908e-fee24150e3ea", "comment": "Malware payload (Mirai)", "value": "95f6d8d8f2b7a9e2982221a6ce8b1d6ad908b42982f425dfe8feb39a81d34d02", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876445, "uuid": "3868b52e-bda3-469a-acd7-801a59f303ae", "value": "T16192E059C2BD8C6FCC46D2792B9AAB8732102829478F935A7E997E517DF205C13E4E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876445, "uuid": "3bb1c073-9072-4363-ad48-d6f2bd7167fc", "value": "384:MGtDvsoTbYnoBZsDJYXSXcLRL2LafB3z/zIPbU6UEIng6dW+:7tDvJInoBGlIQO9zIPbU6UEI/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876445, "uuid": "c3a4abf1-ce68-4022-bd06-3152271335f7", "value": 20000, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876445, "uuid": "6e975054-6d34-46ea-9932-9a4def9084ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0bc1ad7-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876445, "uuid": "9116ae74-19f1-429d-ab07-ef67a6f8ac98", "comment": "Malware payload (Mirai)", "value": "9f2300e2789d7f0bcd2ad0b6efd5e029", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876445, "uuid": "1627b1e9-01a3-499e-90e1-8bd8171eae9a", "comment": "Malware payload (Mirai)", "value": "1eda520b3107b28579305cc1b00c99a61100f15ffef56a1c04ddad10e83ba117", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876445, "uuid": "0c756f74-c4c9-402d-b428-e0c3f53fd0f2", "value": "T1CCA2E117D562EC22DEF01277F41D93846BCB5B34D0FFF8DA8216C0182A425917A671", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876445, "uuid": "afdb6e71-56ab-404d-a249-681b0c4ad68c", "value": "384:TYrwtW123jsdYmXfu3UCamvODTi5f6LuhsKSbSTJ+7YeERN52WWwLaTmdGU57D+:YdjWJjGLuSpc/v5ewL83Ug", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876445, "uuid": "e99e041b-2c4e-4231-b5ac-301d9338c0e5", "value": 23272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876445, "uuid": "feda4459-30b7-4ff4-a33e-2414f0722291", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0c06be7-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876445, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876445, "uuid": "e83fc61c-ce71-4cd0-b66c-93c5d68c83e9", "comment": "Malware payload (Mirai)", "value": "d0b3bd1437704888b717bdc777c8d80f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876445, "uuid": "b3979caf-41c2-4584-ac08-c6d68dad1aa0", "comment": "Malware payload (Mirai)", "value": "06c7eb0eaaffbd56fbad19a6ef7d4b31b641a25833ed76e0a91db93167061486", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876445, "uuid": "e07d3a8a-2a10-4057-be4a-fa3482a435ad", "value": "T16DD2D05157880731E9E47C75D9BE8303E362E2B585EEB09336342AE18C608D296FC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876445, "uuid": "5fb8e7b6-2259-4458-acf1-8c527d337524", "value": "768:Kc1vYY2Y2lOsbeWcgtJShEBR7qVtnyTq3UirCM:KWE4sbeWckmEP7L+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876445, "uuid": "b7f3f999-2d16-4c4c-8777-1c3ef39d14d4", "value": 28468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876445, "uuid": "aac99206-0d6c-4df9-aff3-7f5cc2d63cb6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cae43aa7-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "8a02fd77-d9a2-44cc-9e2a-aed2da106594", "comment": "Malware payload (Mirai)", "value": "d7632a4acb4d1e3f2c67c2b26bacd293", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "e2db9e21-c924-4fde-82d4-447bf94f1273", "comment": "Malware payload (Mirai)", "value": "73ee19c193b47f844c000011e7b0f90c6d4cf4519dbdd4ba7ed738903d6825ce", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876494, "uuid": "7c1d35b3-9f5f-4021-9a3e-08e11ab669c1", "value": "T19CB2D05C159C56BAD106873841D7BC4129B342A521AECA5FEF787EE02FAE120C2BC4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876494, "uuid": "265f21f9-9357-4af4-93c2-02a11ca99f4b", "value": "768:XYgv2x1frmthnyJXFQuF2Btzck2lqsNA1yqB:XYa6froytFQa2Bt2lqsm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876494, "uuid": "79bd5c5b-9746-4826-972b-cf8e1156f958", "value": 25196, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876494, "uuid": "4dc58a2e-c1b3-4e10-a55e-63b4511f17f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0e59ee70-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0ec33767-805f-42c6-bc9b-d99499e587bb", "comment": "Malware payload (Mirai)", "value": "230df5cdbd9973889cda65c577b8cb08", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "dea16a22-0312-4a6a-8585-cb59c5e20888", "comment": "Malware payload (Mirai)", "value": "2d087a3663d5c325e9884ace959da019ea2c51509389733a08602de18f41ff0e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876494, "uuid": "fb521323-8957-40c1-a9f5-91884ddb9995", "value": "T101A2D0635B782757E5E6C5B32CE3FBCC58A63441ECBE49276AA8B9A78113418C143C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876494, "uuid": "0d3b8353-ccab-477b-96fb-25acb8616da0", "value": "384:0w7yO5i9MOcClUMLQRx398wC0yT8j9sWIgc+e5xXoEkDwvMwl1QfQMo1v9:0ME/c0XLQjNdC0cDWIgcloBDXw3Eox9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876494, "uuid": "5386d20b-ce5d-465f-93ad-71bbc81e3a78", "value": 21628, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876494, "uuid": "edab7b65-a37a-4e04-915c-6ae7cf44bcc0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a10b45a-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876502, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876502, "uuid": "65c00d40-ee85-43a9-8584-c5c528bf5b0a", "comment": "Malware payload (Mirai)", "value": "1a12044f3a08ed36d44362a6f66f9ff3", "object_relation": "md5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876502, "uuid": "472a258b-df38-4697-93bf-36dd9cfc1360", "comment": "Malware payload (Mirai)", "value": "03df9ba296d451df918024114009f9d57ebd205d327f9b650f494c26c2e1a571", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876502, "uuid": "194f648f-0949-4587-94bc-0216004886a5", "value": "T10B92E06101B0C33FDC6B40BAA79E0E1564F3692A993E5B950CF7EA8970F75C14E34D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876502, "uuid": "a3128618-580d-4d38-8922-ea3a4d8c34d3", "value": "384:Mqeru1/8mbYIaih4EQlzgY+EOj8JqTCSKfRVrTAKB+Of+sjKKPUWp:9eAkcHaih4Ek0SA8JZSm0K8a+sVh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876502, "uuid": "aa213d8e-dd19-4f0e-bde1-83558292e4bf", "value": 20216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876502, "uuid": "7496f592-9428-4fa3-a707-d2aff42471ec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "342f164a-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776876558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876558, "uuid": "811321c3-7133-4d49-a44e-b695e92e5a76", "comment": "Malware payload", "value": "3f148a5bcd5430ec58a149d4c67aaf0f", "object_relation": "md5", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876558, "uuid": "ea4829f7-9902-49d5-8649-4744339f6931", "comment": "Malware payload", "value": "dfeae96a7611608dd06eaf7f41e4371bbc90eb7663faf7306ad952e4e7140770", "object_relation": "sha256", "Tag": [ { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876558, "uuid": "00e48431-6183-4731-a0bb-67468aad024d", "value": "T177B533D8E86FC5F8896793ABE176785DC8D6738664F9BC0171F7C8321C86B005B58B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876558, "uuid": "f765abda-5d2a-4ef9-bd96-959ba2f7c622", "value": "49152:Nd06RBg5HHuF9qPU0SXBZ0tAc7y83l8AuA1245dMz0whxLTrOd4TiFS5s:w04uuVSw6c7n3GAubaMzxxvrO2s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876558, "uuid": "4cee8a17-4b9d-48cc-a7f4-a3b64cfdc00d", "value": 2385732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876558, "uuid": "65108cf8-b1e5-459b-9a27-5d1f66f3d4d5", "value": "image/png", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a48b4c9b-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "60bafa47-756f-4158-aa90-e64cd01a1bb5", "comment": "Malware payload (Mirai)", "value": "70f30a412c7c5f5b1308ed93337ae0ea", "object_relation": "md5", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "11932700-ba97-45f0-b418-44a09d1eea1c", "comment": "Malware payload (Mirai)", "value": "ccd36d14706cceaf19cecf42d00aa0f067f5e0b6db5b7814f3a72dc52cea18f9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "140d0d87-cb12-4187-bcb0-30f11d725a02", "value": "T17703E06D78D47892CA7D3D3731AC23F25314A2E9369F278101468CD8E778A97FD4E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "2739c608-1486-41c6-ad60-8f0da84edcb8", "value": "768:aRbMN2q8qb06Ds/ikwkKVaAgNorLP8uhdRYE7nimWTRyIWu:aRgzPb09Ia4rPTaEBWtyI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876746, "uuid": "888a09df-c5d5-4d74-a2a1-f59193914a66", "value": 40024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "6b95571f-9c0a-4afc-aae7-7e84d182b567", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a48f4592-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "02133191-e9d3-4dd5-bde2-3b539f57edca", "comment": "Malware payload (Mirai)", "value": "b71ce028693114e575a440e53f55fbfa", "object_relation": "md5", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "4421c27c-72fc-4b04-9281-fce5e36fde48", "comment": "Malware payload (Mirai)", "value": "2459df010a422704aca659d62eca7ebcf37c4d6474c1c2bef6c7db09b5fea58b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "a3b78111-50bd-4fbb-b3c1-855cb9a527de", "value": "T13503E194C2318E73EAB11C79E29C4AC22D6713D920FFB383714962B4B756646F1FA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "a8a1606c-40f3-408e-9ae8-b20333a999de", "value": "768:f04CCQup1yJWpChh9y2J+pasa/B3FSxSC5s976hBIqp5nzEVjR98z9q3UELox:f0TupMJXhhnIYs6rClO97SIi5Y398yLW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876746, "uuid": "9bae5408-eb00-4f3b-8c9a-d09626e1e206", "value": 40040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "00af5a59-76fc-4325-88f1-a2cc00eff293", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4903257-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "7293facf-9259-4f69-b2cd-186c2a6310d1", "comment": "Malware payload (Mirai)", "value": "c5891af47951df6dcb1d0b81eedd2703", "object_relation": "md5", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "62ce7f9e-a594-48cc-952e-18e746747b34", "comment": "Malware payload (Mirai)", "value": "cda9bc158fe4d2cd26d002b7b99b2e5ac0c75bae354afa936073ee90739b5485", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "3ea0e9fb-d9f1-4a3f-a260-ab1a27d206d2", "value": "T1FBF2E1B0E0955B23EDE96A28A951CB806BF985DE7266C8C51DC71F10130F6273B3DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "41a29f05-d102-4f8b-b596-1b9de89b7ef0", "value": "768:XtuamiJLv9aBlP0K0fdYXCATRX/Oc6g961KPNU5KQAPxdmHX94uVcqgw09M:XtuHy0l8KyWd1/O5g961ENUKQALsX94a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876746, "uuid": "ac26570d-174f-4f76-985e-c7b578e29e4f", "value": 36260, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "4018c8f0-4191-4b02-ac44-045c800fdc98", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4929f8b-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "f769f5ca-b98a-4ae9-ac4d-6a3d1168f9df", "comment": "Malware payload (Mirai)", "value": "ab85da52b476aec480bea57c19ed1b57", "object_relation": "md5", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "6d1fe501-8702-40f0-9b19-fdf4d2fe1a26", "comment": "Malware payload (Mirai)", "value": "54adb83e52d1e3c65a5f8086642cadc525e2a4e642ce5bb3fd6b8955f7cf678a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "10fc7e01-a211-4ffc-9e67-54f1670aa297", "value": "T14A03F14C935055FACAE84AF5256C036059B14E563113F8022E4EDABBEAF1D363C5BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "0d197b4e-94f2-448c-b346-fe6254acd9d1", "value": "768:gi231FZvxdHbgC7j/75fLYP1elii+OOBBNT+zm3qKYiNN0KVHpK2W/bsJgGlzDp8:KhxFrqe/+OMgm3qQNJSbkVJuL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876746, "uuid": "82df0a85-5e68-427f-a159-fda46492c04b", "value": 38868, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876746, "uuid": "5c75c3dc-e65c-4992-83e3-a2514d8a1f44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c40b0adb-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876799, "uuid": "79ead714-8dca-4be9-910e-017c1effbbd3", "comment": "Malware payload (Mirai)", "value": "92a0c74410fe058677418beea5a98892", "object_relation": "md5", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876799, "uuid": "bd8b9921-dbcc-4f20-bb96-82aef93fff26", "comment": "Malware payload (Mirai)", "value": "88eaad363a3e1f7df66bddbb4ea59c1c6dbd85de734f1bfd43c6eb94866f862b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876799, "uuid": "5ab0d424-3965-4482-b8ae-e592b7d6450b", "value": "T11F639EB3C9393E94D25541B4B830CA795B53B48481871FFA5A98C6FA4047EBCFA093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876799, "uuid": "1a395d33-4515-486a-8e65-0523d036bd08", "value": "1536:sa9wtr82FLQgB93HK9QATGRuzuCy2KNdwq61d6o:sib25QgD3q9sRuzu44q7R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876799, "uuid": "b919072c-2274-4e19-b705-d1e5007b3293", "value": 69116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876799, "uuid": "94853e88-ce17-4a0a-bd92-0aae77a2d49a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c40ebb52-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876799, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876799, "uuid": "00369711-90ba-451e-99d5-59b117a2c7a8", "comment": "Malware payload (Mirai)", "value": "70d5e333c6cacf8605f91ce64a0a6533", "object_relation": "md5", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876799, "uuid": "68e31237-ca74-4ffc-a010-65a6f0644b36", "comment": "Malware payload (Mirai)", "value": "22eace6298be01df01409e74534c0fec22d6527a786f2a934a71f9ed5c1b6a58", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876799, "uuid": "cf1d8aaa-3c20-4bea-9c74-79334ff69c57", "value": "T11CF2F151A48298B3F5D16736F83D930562D93EF8D9E1712B29303B189789362A1FC3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876799, "uuid": "d2f04140-26b4-4763-b976-d754d75481cc", "value": "768:dE0anU+dRP2QDd4gMCKkLqxsFK67RZa8D5RVzVSBViwm3aVZEs3Uoz1:dE0aUSR9DYClAwf7R5RVpHw/hz1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876799, "uuid": "871d5fbf-8c6a-4977-a35f-a55deada81de", "value": 37472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876799, "uuid": "af2af1ea-047a-4255-b340-6072d1a234b4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c561b86b-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876801, "uuid": "b0bdbc6a-4ee4-4332-82bb-d4438ca09697", "comment": "Malware payload (Mirai)", "value": "4f7e63fe2e15323878c9411e6c59e2f3", "object_relation": "md5", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876801, "uuid": "05c41f23-51bc-427f-8e2e-0c4dfaf8f6c1", "comment": "Malware payload (Mirai)", "value": "ef24cde08526521cc32a30608bc7ae641ec9a04a84dd3ffcdf07cf9587cefe50", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876801, "uuid": "d71059f7-41d6-45a9-96b3-10415c6aae4f", "value": "T110F2F11783D84189F5B5017D1AFA7D5E0700E4AEA0EDC6E2DADC22705EF2F1426396", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876801, "uuid": "7e3008ee-4975-487c-b09e-83249af87163", "value": "768:oT7+FNO2hBl4y8k9KINU5IvpzCe3f5KIV14pBCxHL01uLAw3q7nbcuyD7UtQRjt:oTAI6BeybKU5ZNxViB+HL0Yonouy8tyJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876801, "uuid": "2574b7ad-14dc-4871-983b-290d2ad3db3b", "value": 35264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876801, "uuid": "5e1f6a64-35d5-4e22-8cbf-c407a880e0cf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c567f60c-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776876801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876801, "uuid": "5e0884e6-a9bf-4775-a10a-79ef72233b4e", "comment": "Malware payload (Mirai)", "value": "dec02072c5aff0059c975c3407e2b72f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876801, "uuid": "648503ef-d51d-4be2-9d76-341412fb92ea", "comment": "Malware payload (Mirai)", "value": "87ce108741391ab4a2bd676df5eba1b026b763502a2158a58b9b6d6606f8d653", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876801, "uuid": "fc82b02c-94ea-4015-9e56-c9762c7ef8d4", "value": "T137834BD7F410DDBDF80ED77B4463490AB131A39219831F3A639BB967BC321943966E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876801, "uuid": "dab18b75-cdb8-4633-9af8-cff4632e6d1c", "value": "1536:mEOAoGHPYj5HqZWaDX+aZ8oyCsFTNHFFaWonzs6N2uAQJSYh2a4rsvg:mEOAZHPqqcaDX+aTyCsFJiW6zsKAYh2J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776876801, "uuid": "0b24e0b5-cd13-46b6-9b8e-473d6c68f244", "value": 85804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876801, "uuid": "8cd2169b-3138-4008-bbec-5edada2e1f90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e535546-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776877031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877031, "uuid": "3f3f1895-b074-49d1-8ef7-304a8ba095e7", "comment": "Malware payload (Mirai)", "value": "adede6012fd54bcbc945e730e422f58e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877031, "uuid": "6799721d-3b25-42a1-88e9-0609b2d5726c", "comment": "Malware payload (Mirai)", "value": "03fbe36d24a44b2ee5da58626dbdc851ab78f85f5a475f51604f2bcbd77be114", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877031, "uuid": "1f6151c0-ad41-4f47-8a91-83a100e42808", "value": "T1CC539C73C8296E54D19582B4B871CB781B63B48482471FFA5BD9C2BA9083DFCF6093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877031, "uuid": "8635e876-bc26-497f-956e-6db9440d72bf", "value": "1536:JaDwtqKcomlIFZCXaZMYfPkYP2gpK2mP5A/iabC0c/v38Bs/n8a:JwacomlITCXaZMYXkYOgQ2mgiabgXMla", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776877031, "uuid": "426b2d27-99bf-46e1-83e4-5588d876b2d1", "value": 64464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877031, "uuid": "f934a86d-ba48-4543-a279-5d98959add1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e672461-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776877031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877031, "uuid": "a6eff23b-1556-4c31-9c60-31ac1150982b", "comment": "Malware payload (Mirai)", "value": "66950571c6036b074e3699ab62acfa58", "object_relation": "md5", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877031, "uuid": "0d8ef086-92c2-4595-b0d8-17a99a172fb9", "comment": "Malware payload (Mirai)", "value": "8d148a59fb5d1b2a4413b87620f7b757a090b7036c4d947220870dc96842fddf", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877031, "uuid": "b0d1f4f9-fdbf-40ba-86c3-a05b7a6b066e", "value": "T178832A97F400EDBDF80AD77B4453490AB270A3A105830F36A39BB963FD721A45967E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877031, "uuid": "692aa571-e0bf-407c-a1d6-90156cafcad8", "value": "1536:quKG91y47gWxYRyRqwwrzPQtav8FjWtFUo/V6OXZJ7/aNSOFmA7ExtX1dT:q5GTDxYRyRqwazPQta6Q9VXXz4FmA7ux", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776877031, "uuid": "94333412-ac29-452f-87df-684636815f85", "value": 81652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877031, "uuid": "668b13d6-af1d-4c92-90a5-e7be05b245a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e8a2c55-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776877032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "1afdf569-57a5-484b-93fb-ce36a978c624", "comment": "Malware payload (Mirai)", "value": "75524d92b58134a263a4f974ff803d51", "object_relation": "md5", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "d0956865-b3ce-4001-9f39-9f1e924bef19", "comment": "Malware payload (Mirai)", "value": "dc816a34db08d916d083fadbd1c5d5fbba08c4e0ec72a3f355c071f53fa326fe", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "da2700bf-e950-43bf-83e7-92ebb6cb4bf9", "value": "T191F2E1310A4F25B0C6F0ED79A37C04C969970A00C1B3BBBA3914A5E5F794CB736B95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "08d09bdd-712e-4584-87b3-cdc46ba12339", "value": "768:/ZAb2jdTWDPtuRl/x1lADatHKeo6SekEaeHPQqhMrCDZ0s3UozD:/ZAKjBWDPtuT1+2Fo6r3lVTXzD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776877032, "uuid": "a27e4c6b-0659-4595-970e-9f7785ddd3bc", "value": 35556, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "86aad50b-ed1d-4dbc-9a1b-fa5329716354", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e926199-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776877032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "7435bcf5-7044-4302-bac5-88908f380237", "comment": "Malware payload (Mirai)", "value": "a63ca56c0551f1b00081c7d367e8bcef", "object_relation": "md5", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "9e70f75a-c81c-4583-b5d7-b08993fdb273", "comment": "Malware payload (Mirai)", "value": "544cb36ea672c8aa276ac42297c45c4396e332a04c862f64ab1820312dc483cf", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "5ba1f1c5-ef0e-4964-a3b7-c28402a69da9", "value": "T16FF2D068C0F6EC36E6BB6EB159C9C7C123244F9DB7374E9270498B102B22E27161DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "ad788004-68c3-4fe8-b8cb-24f7d41b81c6", "value": "768:sk9hrdmlHUKd0OmGgZvoBHiJ1toEHYLEy4uVcqgw09s:sk9Nd6HDz/kek1toKSEy4u+qgw09s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776877032, "uuid": "2011747b-bf2a-429c-ad8e-3c9dfafe18e9", "value": 34324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "939d454b-b95b-4bc9-9b4d-84f777971b8c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e995dd2-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776877032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "bd6394f1-970a-4a05-ad9d-87396427269a", "comment": "Malware payload (Mirai)", "value": "d7ae27db442015c779e88c3903e7c402", "object_relation": "md5", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "e7b65474-1fe5-44e4-ba0c-7fafe7ed770a", "comment": "Malware payload (Mirai)", "value": "b75c277497ed9416e9497528d4dffbf2b1fdfb72d602b40d17c1afc413bf4cc4", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "db0c2dfa-1bcc-4f17-ab8a-17f5dc546399", "value": "T12003F2CF6AA8B5DFC0DD59B921AD07159B8472C03257874CB30588AD7B3616F789C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "978ffcbe-cc51-4dbe-9586-bc033a7d1e65", "value": "768:jVyIwYjG0JFk3J3QwV06tNOsPNvr3cNr+kACdxPCR/o0JkauQ/WQ:jVyYjXJu3JAwEih3GJHC9LuQl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776877032, "uuid": "5307ddb2-d496-475b-a720-8d648788a7bd", "value": 38096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "75dfa263-9771-4176-831a-5644b250d1e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4e9c4639-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776877032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "c059e653-3f97-45fd-9621-019f0f61f68e", "comment": "Malware payload (Mirai)", "value": "4ee07fa214b617415807ef3d9692035c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "6a9e1743-6af1-4108-98b7-0381f22772d8", "comment": "Malware payload (Mirai)", "value": "65711d0c5f33f7f37cdf548ef5dd05abcdb688241708b4959e4e142e9349f82a", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "89891b12-3c61-405a-82ce-0a9f0d6a4775", "value": "T172430271E08365B723611260E0685FA276931BBBF4FC65332BA665C873C401A77F85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "437cd34b-2ec6-4ad1-a811-c5f3d284d420", "value": "1536:TbvFHd2MJcYZElS+JZepg6Luy6tlV1nLL:/9d2ScYmlS+JZep/Ld6tlHn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776877032, "uuid": "e801c8d1-eb0c-4cae-85f1-e2e87273b808", "value": 60152, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "a7b2d82f-9262-43ed-aa24-7236d59b887b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ea058dc-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776877032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "09ca52dc-3625-4a69-ac05-6a04b38d4519", "comment": "Malware payload (Mirai)", "value": "f1f4835ecddd08952fcbab135ab43251", "object_relation": "md5", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "32bb06b7-6877-4209-960f-c857bb4a19ac", "comment": "Malware payload (Mirai)", "value": "460cdc154dc00f028f907a54776ab5529ed24a6d0654b07a7c3d769598efc3e8", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "a1f2ac50-9c7a-466d-a1d3-d41188f345a3", "value": "T1AFE2F26A51ECB12CE44E903BC32FA98E31E65D11FE17C69424C476DADF601F914B68", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "05de8565-ebb5-4986-abbf-2fb3dd65005e", "value": "768:g32bRAqg2AQzSPMjFY8AFOEPB6ZSq7xnwNQBU1:DbRAp2A4ECF+FvB6ZSonwN2a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776877032, "uuid": "4193eb33-a8bb-4f58-8a5b-6e01f58aab22", "value": 33900, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877032, "uuid": "58fadd56-cb00-4da2-bc2a-0b7cb3463a11", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "53c58429-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776877040, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877040, "uuid": "dc6981ca-4a1b-473c-b19d-34f907a2d159", "comment": "Malware payload (Mirai)", "value": "fc85facfd5d1ba0ffa73140819ac6292", "object_relation": "md5", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877040, "uuid": "efcce901-215f-4050-b8f7-45eb70dd4190", "comment": "Malware payload (Mirai)", "value": "37f1890213349e8fa8731ad58b611b3c795acf61f28fdf614e5313ef4e62c772", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877040, "uuid": "ed15a251-e6eb-4586-9778-8c0a4e97d8df", "value": "T186E2F2336D05BCB9DC7040B7BE6E82C7B65386B8E19E229A793807FA71C754925741", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877040, "uuid": "77da4a57-d078-49e7-9934-f5bedfb5c768", "value": "768:ceBsVPxhgZ8g8H0mQV2pbL6lNxbUC3CBIWpmKnoTs3UozU:ceGVPxGuhW2BWT1ZRGmKno+zU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776877040, "uuid": "6e1110c3-ef30-4fff-885c-13efdd70bf9f", "value": 33872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877040, "uuid": "56843f2d-d31b-4a50-8485-85660f015304", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9da9284-3e72-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776879896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879896, "uuid": "37ad1ea1-b776-4359-8866-9f96ad65aa8d", "comment": "Malware payload", "value": "dd3e72ba784019b19bd0ddc9883b8999", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879896, "uuid": "8a4945ff-de61-4c6d-9c2a-a629de2667cb", "comment": "Malware payload", "value": "b53ff9bbd9880ae190ca3108f7fa4362cc41806141a6e874fcc15cc3c9b5bd79", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879896, "uuid": "e0c8b583-4e73-4a7b-9e32-848a80856e74", "value": "T13824F14D0CB1235519B50A0AE16FD47B8B67A3F004E1937B1763D2A3968F6F8CA637", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879896, "uuid": "3c61e7d8-e0f1-4a0f-b852-35873c0c471a", "value": "3072:ACpVXbmF6m6/CBUq5cVY+oAhstSlnzvWwO+701T6NBC72W+yOI0zMIzhNH+AtGw:AmBbs6SBUqHOYkzxN22WAwIll+mGw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879896, "uuid": "8496a1cd-687b-41ef-bced-e9bf7bb27f5a", "value": 213074, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879896, "uuid": "fccd9ffb-679b-4c00-984f-e576222dd8b5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "26d846dc-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776879971, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879971, "uuid": "59b0eae6-6cca-411d-9aae-9f65f8592297", "comment": "Malware payload", "value": "b434f99e8f663503af6467f697e0f9b3", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879971, "uuid": "df8ca749-04a5-4936-a50b-da01943ff025", "comment": "Malware payload", "value": "6a500283df92975678a1928a9ac2db5935fee14e82a137343dc430ebe79d11e7", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879971, "uuid": "e5e9b289-1029-4792-b930-287e55421438", "value": "T155A66A41FE8750F6EA03293241ABB26F63315D068F36DBD7EB503B29E8B76D148362", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879971, "uuid": "0aa0e5de-a3ac-4859-a407-461efd6f7e68", "value": "1aae8bf580c846f39c71c05898e57e88", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879971, "uuid": "ed363c5c-4389-4e1c-8b5e-2ce0813c6fff", "value": "98304:RP6XGXGGFDWt7nIJ3/14trMxq1fEHOzgD0cLzrSpmbiBVlGJJwVdWpWtmuVa0CQ:37FYEJ3/1k47HXXuqP46W7a0CQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879971, "uuid": "ce9468b7-a1c3-40f8-bf2b-696335cb4b28", "value": 10381312, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879971, "uuid": "b8e47ba2-cf5d-4f13-8b46-640615d41176", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "271cb208-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776879972, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879972, "uuid": "de17011c-e0cd-4821-9dc3-51fdadcfb04f", "comment": "Malware payload", "value": "5596c14c8af9d1c178a4bd2a079f653c", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879972, "uuid": "8e2cfa11-d374-4cca-8f97-7e8e1db423ee", "comment": "Malware payload", "value": "29e2376d593762c4885badde243775bf7290ae975fd2dd7fed80447cc57bc9ae", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879972, "uuid": "51d6f0b7-bbf5-4dce-aeb0-34be8a4b2156", "value": "T186B6AE43E8A105E9C5A9D230C9B39253BE717C591B3263D32B90F3786F76BC46AB97", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879972, "uuid": "1248ab53-d90c-4453-ad80-ed7c5acb48b6", "value": "d42595b695fc008ef2c56aabd8efd68e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879972, "uuid": "10de2517-59da-412b-ac37-bd41f3e9dfac", "value": "98304:bLy8W3DZT/03QQvrDicEPsYTdnAbGGsU4n5fWRBHC9xKVBM:bW84DZBQvCVEYTlUGbYRpCyVBM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879972, "uuid": "ea2dc939-b524-4d83-9c03-ee95fc059484", "value": 10660352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879972, "uuid": "6f05ed13-96fa-4320-b6b0-7c88931c691e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a9efc32-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879978, "uuid": "952f61fa-df09-4507-8354-ffbdb3bb8cf7", "comment": "Malware payload (Mirai)", "value": "3f2b2c546413273ef0fe9ad525fcc13d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879978, "uuid": "25fd29a4-f0bb-44a2-9e38-2620468b9db6", "comment": "Malware payload (Mirai)", "value": "b6b9c0059471ab8e332c493af43bc9e9e7e060e7e498fad74ba76ae969628f6b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879978, "uuid": "0a7b9bfe-ced4-4d8b-862b-0476daadcba7", "value": "T16BE31945F8414B27C6C612BBFB5E428D3B2A17E9D3EE32039D216F21378696B0E375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879978, "uuid": "eab4dc1c-3c18-4fce-be1f-3bec72505239", "value": "3072:gCDNegwwlgT3uBLtvn8u1R4rkBjNHhW0cIJva0Gju:gCDNeEysLtvB1R4r2jNBW0X1pGju", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879978, "uuid": "e5ee1a45-57b8-4785-b26e-c94d160a73f5", "value": 150304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879978, "uuid": "786b7127-ca13-4227-8cb5-e3753a62c4e2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2aae3d0a-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879978, "uuid": "5052cf51-8e05-46a1-8571-2ef127a343cd", "comment": "Malware payload (Mirai)", "value": "308da2a9356e221db66ad96dd5d17a33", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879978, "uuid": "4f0923e2-d8fb-4f80-8e0f-5838d5292337", "comment": "Malware payload (Mirai)", "value": "8833200bc00ded45694879cadb3e358e5f145a3bfebd5f2b7d775e2fa760970e", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879978, "uuid": "bf1bb754-f5af-414b-bc67-541447dfaedf", "value": "T115D37C73C829AF98C555D1B4B4348FB82B23A590428B5FFA19A7C2B44043EDDF509B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879978, "uuid": "28f1ebe3-caa9-4f41-813a-76f1bc74073b", "value": "3072:RGfMR3jSlZe0tDxIfAQDg1GJLHmWBr+45lMu:RbRTiDxIfxqgzBleu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879978, "uuid": "449f7862-873f-4ccd-8d0f-3fafa67f900e", "value": 133952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879978, "uuid": "2daaa34b-5610-42fd-b1a9-3adb155e7c06", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b4ba194-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879979, "uuid": "027dbe10-6aa7-46d7-97d8-5edb80278f65", "comment": "Malware payload (Mirai)", "value": "9f82fbdd1f74ace94b22635aa45492bc", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879979, "uuid": "358ff254-dbb1-4177-b78e-992b784da61d", "comment": "Malware payload (Mirai)", "value": "3976d7df147e852bd4652c6ed9be458abda286548aec40fe375cc7dd7eb19448", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879979, "uuid": "7b25f556-cdc7-4356-8780-ec931547312b", "value": "T141F33AC7F801DEBDF80BE73B48530909B530B7E111921B372257796BEC7A1991867E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879979, "uuid": "8a1ace9f-c53e-40bb-8211-0000e06c7c6e", "value": "3072:2GLPPY1v2addiTV/8cA5nQ9aVvjbiJLTUlSyY7QC7:5H+diTVkc+Q9PLTlyYkC7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879979, "uuid": "3b74bdcc-eca7-47da-acb5-5216a90a0a87", "value": 165184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879979, "uuid": "0d56284b-3a88-404d-a6fc-290ede6dd3b9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2b79e281-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879979, "uuid": "bb5cdf95-889a-4de2-95d4-f14bcc34952d", "comment": "Malware payload (Mirai)", "value": "3d68d416d40a61b831159c28bb5f19dc", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879979, "uuid": "79b6bb8e-155d-4879-9505-53ee62836832", "comment": "Malware payload (Mirai)", "value": "adc4173f12b8d59c145d3b624a6a07ab3204692b87d09a3da579625497f7f9ac", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879979, "uuid": "41d075bc-e9e0-43df-bdfa-1f984a838bb7", "value": "T12F14C709AB910FFBDCAFCD3706E91B0139CC644B22A43B357674D528F54A54B5AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879979, "uuid": "0646b59c-bb91-454c-8621-fc3b443fb5f9", "value": "1536:Mu/hOZZNY/nz30kswX+UNofrUcu4t7tMJ+SnIoGvjuxR+9oPUkWZ089SZM+fTfDh:Mu/hOZA30YoDZTHMpKoPFWmTfGZhmP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879979, "uuid": "8afca0e8-69dc-43c1-aa0c-463634843ebd", "value": 198280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879979, "uuid": "1e9b0f85-aa27-4248-a4d0-1f238ea43e8f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ba6438a-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879979, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879979, "uuid": "39e6d756-8aba-4cfa-95df-e92b6fcc48c7", "comment": "Malware payload (Mirai)", "value": "9f0e56cd42728fdcd8d830414fbf9840", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879979, "uuid": "6027aac6-56c6-4d58-a1f4-8ab58fcd0cfe", "comment": "Malware payload (Mirai)", "value": "d1e4621fb7a6769cace9e07d37dd02a44776f0623effbbfda0082af6815ebc0d", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879979, "uuid": "b7252539-c0e7-4479-abbe-60c9338ba931", "value": "T113143A46EA414B13C0D627BAF69F4245333397A493EB730699286FB43F8679E4F225", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879979, "uuid": "a3a1aee2-c5dc-437a-a24b-bb0a03d1a41b", "value": "6144:lici+gOabdFyTas+wex1eyqQlOMOGM/RE+w:licX0dFIas+wex1zJOf/mf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879979, "uuid": "ba04b210-c2a2-4345-8da0-edea53f1fb10", "value": 198145, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879979, "uuid": "d3997049-f01b-4f84-a10f-922250be9c07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2dc88f62-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "d97f0b23-f2e6-460b-a406-b3b49fa0779f", "comment": "Malware payload (Mirai)", "value": "5eb905a35a915695bbfa1d695b53369e", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "7b5676e1-e850-4c64-a797-0b4e926f5b89", "comment": "Malware payload (Mirai)", "value": "750afeeb1d7bcab44cc30741c4d1807dd7858be07c9f245ab2ae7ba726e09e40", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "190ea0b7-d28b-40e4-a951-8b39476b0281", "value": "T191E32A42731C0A47D2632EF43A3F27E093EFDAD121E4F644255F9A8A9171E32558AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "ede295d7-da8e-4a29-b93b-9a1e2893c1f6", "value": "1536:3J9qyIKZnU/oNbjQ3v9U3uKxfuWoxKsRQ5IhF18BQxSvASMmOKLJ2o8qcZygkPeC:3J9GEK3lU3uKx0xzRFqBMLSq9k2C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879983, "uuid": "83f92080-3d86-4774-a314-ad8b73bdf33a", "value": 150420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "6d96a5f8-9b81-4511-9a43-bc0103685ff3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e0028cf-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "ca79c00f-3669-4ef7-a872-50b1e2c80050", "comment": "Malware payload (Mirai)", "value": "c12abba21589449b03c9c4187ee78079", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "7306ef3b-e14c-4a68-8648-dfa12cbe1636", "comment": "Malware payload (Mirai)", "value": "a9676f16ec5dbe32e26afd37c6b7ad6afec80c4c6c5215ef409307153689cc70", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "c33b677f-5ca4-4fae-8ba4-66258c374915", "value": "T11BA36CC5F683D4F6E8570571213BFB369B33E0BA2119DA83D3AC9D32AC91541D607A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "351061c9-a2ef-47a4-b055-77a32b1313a9", "value": "1536:xNxKaizxAI+pIWKM5DXiBVjYZEtt06SIz1t+dG9UKVzSG2ehU:x8ziIYIWKmDSBVjYety6V1sdGC2eChU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879983, "uuid": "6dd370ed-31bc-4d2a-9fe9-4c1e482ef766", "value": 105224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "c3ef33fa-5233-4dff-95b4-9567d027eded", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e00a5ad-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "0f330050-b61a-41ee-b990-4bfa9d55f3a0", "comment": "Malware payload (Mirai)", "value": "d4cc40aca32b9fd888819edcb1681673", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "9ea9f45b-aa71-4764-9614-c2ae9dde7d14", "comment": "Malware payload (Mirai)", "value": "2b4e02de815286946c55dd7ae2cd35fd2df2d93352110271f75a6b13d95c4047", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "d0a7a281-a760-4cfd-85a0-a018ab7d54bf", "value": "T103F31B46F8818B11D5C111BAFE1E128E37131BB8E2DF72129D246F65778A97F0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "68f6dc96-dac1-4d78-b79f-126511249af9", "value": "3072:SFtcp03pPoPXJMU0X/nO0Xj3yETFaTJNPFB8PrPq5s:SFOO3toxMXPO0XbyExavkPrPq5s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879983, "uuid": "6d021347-7e51-435b-a1a3-798664f2567f", "value": 160828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "02497e5d-981a-42ee-b308-2b7abbeb4fb1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e08c595-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "46fa3093-aea7-480c-b1ac-53ca3b299add", "comment": "Malware payload (Mirai)", "value": "906665a43b49a7dc75f27c43e031b33b", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "9d1348c9-70f8-4ffd-84ef-149e21b0b141", "comment": "Malware payload (Mirai)", "value": "8269870e21e3c4ac68f20436da0bdea8909cdcd585ae7e160b24b701d6f1a5de", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "e39df305-50fd-4a74-9eb2-468e388a55bd", "value": "T1D3E33917B5C084FDC4DAD1784BAFB63AD932B1AE1238B15B27D4AA232D4DE305F1D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "a001d0a4-156f-402f-9a58-b6b4e5beb1cf", "value": "3072:cLkqscJodu47GUiy/mj8ROVVXqVQWbH/ew+ZlZ2vin:cAqscJodu47G42sbfAD2an", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879983, "uuid": "d7dabcd1-c123-4cca-b165-075fba346f86", "value": 155256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "b9513acb-15e8-4be4-841d-35191056d8c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e0b1f72-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879983, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "c78a3a64-2384-4eb3-97a2-be22ecb597e3", "comment": "Malware payload (Mirai)", "value": "6f259fd5947a5618cae64c08d45c531d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "ee3a354d-7446-4578-b3a9-b2f1b15e8e10", "comment": "Malware payload (Mirai)", "value": "b562e65d5ad485494cee16ec220e496c334fff7d5f100f2180492404a91e3ab9", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "a284cd2d-370b-41a1-9040-d10d1718c5b3", "value": "T1A814A81E6F228F7DF768873547B79E25976C23D627E1D640D1ACC2102E6028E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "d75de762-23ca-4d6b-b639-43547112e78e", "value": "3072:XAZ8k+O2ELg9zQLwpJsI+qyumG+UsVHRKr8aZycT2P/Q:Qq0noQUpJsIxj4RRaZjT2nQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879983, "uuid": "776aa427-21b4-40d6-9ca5-6282ebdaa83b", "value": 194184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879983, "uuid": "f93a893f-f403-4d23-a51b-533873fd8c0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e2f724e-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776879984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "0c60dbe3-f7b1-4bca-8437-19fafcf08a6d", "comment": "Malware payload", "value": "1cb8a6950c37231e24cee7b4a247645d", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "0d612ae5-df14-43b3-9236-e5ea50ab5196", "comment": "Malware payload", "value": "b691b80189ddec3e164e3f69a6bdfa91aacbd75e21900d0d385cdb25b15923f5", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "4a3eaefe-82f9-409c-9984-b06851b947ab", "value": "T13EB65C05BCC42BBAC46C4A7154EACA5122B05E100AF2976A2565FFECBC772397F578", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "a555ecfb-1e71-4775-b2f3-11496ab314fb", "value": "98304:XLHubIo2sWfcsQ6znDBbZFuE7hwYYTe1Z3UwYHTY0Wy3eZF0JkKddOxXpckB:VQgDBbZJ7hfY6Gz0mJkKLeNB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879984, "uuid": "cf3a72b4-6391-45b6-8e1c-6d715b70a6fa", "value": 10897711, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "16f8677a-b145-4a33-8f26-2f0d2de6a5ed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e3bed43-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776879984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "c23c6911-32f2-4c64-9541-f130b4847d85", "comment": "Malware payload (Mirai)", "value": "66775f6b1590169ce4bfdd3453792fab", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "5886b271-7fc4-4303-8745-d2ff9f176499", "comment": "Malware payload (Mirai)", "value": "b7867079ab1526387fdfd5156d08803ac1c360d52adbecad61f22c4d1b1ea71f", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "be6c901b-140c-4663-a847-222d32a5eed4", "value": "T1BFE31945F8414B67C6C612BBFB5E428D3B2A17E9D2EF72039D256F20378686B0E375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "ce3f6feb-afe6-494a-b921-31f6d94180bb", "value": "3072:LphIqDNU5maG/raUN/FWUh45kOXDAlwOhCJDe9u:LphIqDNyZUNtlh45JXDowOcJDe9u", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879984, "uuid": "f7b56812-d0e1-4588-9ca9-c65cba23d4fd", "value": 146208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "ce0d5c07-e99a-4940-8eda-cbbcbd92e27b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e52b4e6-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776879984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "4d330b61-c7ce-415f-9759-6b453e384a37", "comment": "Malware payload", "value": "48f228c30c8af1b68ab93509a433e7f1", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "3de69773-804c-4255-a6ab-1a03382cbb07", "comment": "Malware payload", "value": "07b655eebd2932f45ee16e8c28150f8c5e46afdcb544039e14e573a5b83244f3", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "11500a8f-a304-4c58-8f0a-ab6dcadc2e73", "value": "T146A68C41FDCB50FAEA030A3005ABB27F63315D0A4F65DBD7EA107B29F97B59209362", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "b02e70a9-d6f0-44ab-b0a7-1a930b3d093c", "value": "98304:1XNvYclFYHEZ5UG5+1JGh35SEqXZf4n9Wrd9V9BwRZdG8xU:1uoYkZ5H+1w/0Z6CdERPt6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879984, "uuid": "929211e2-d662-4092-bdb4-19014af4cf17", "value": 10234135, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "82bfd53d-b3d3-45fe-b10b-a9e019683970", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e648e8f-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776879984, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "37a288be-84df-4f0a-8a22-870c02235c01", "comment": "Malware payload", "value": "8352d1646778a1452f72013e13716eee", "object_relation": "md5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "e7bff513-8230-4870-b040-ddec12c87fce", "comment": "Malware payload", "value": "b8ca0bd6ede154a6b3830e899e52118339a716e608b448e85793c295732648c4", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "34f3e909-5ab2-456a-80d4-9a60d6e7a471", "value": "T17EB669137A6CEB0FC62822340DF2DAD4276A1C9601D7A557B385F319E9F20AC496ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "cb37148a-8fd3-41aa-af81-a885902ddd2e", "value": "196608:gdgxL5f5dWwaGHnPJ9n7HDUKzldwknvd01zUdtsTZz0C:gdgxL5f5dWwaGHnPJ9n7HDUKzZnvbqCC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776879984, "uuid": "283b34c4-6397-4197-8119-c1dd974d7b82", "value": 10965611, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879984, "uuid": "ba4259b8-1d6a-48ee-b3af-213ea11d5b64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1549e33-3e75-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776881170, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776881170, "uuid": "4e3bcfba-9089-414d-84bf-ed94ff5b7527", "comment": "Malware payload", "value": "37ef23430b371a69ebdf9dba5cbf890d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776881170, "uuid": "5fc9679c-8ed4-4d38-8cd4-e1d84107c138", "comment": "Malware payload", "value": "b3860807dc69e41662ef4dce565e98b77ab97de35f4295342909361709aa5424", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776881170, "uuid": "69cb1580-d68b-48f5-b926-ab5f1713ffa2", "value": "T1B293E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA523895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776881170, "uuid": "f54ae697-b778-4558-8254-a33f57ee4f0e", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPX2IH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776881170, "uuid": "b5785558-b8bb-4c01-9803-522fc2e3074b", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776881170, "uuid": "39cabe5f-2f29-4adb-a00d-b8d7e599c4aa", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb2edb30-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776882395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "628e5077-c682-4f01-b4b5-3c170f8c74ad", "comment": "Malware payload (Mirai)", "value": "7d1044e42c032f1050c171616294bde8", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "fd637250-cd64-440e-8f9e-2538fd71f7ca", "comment": "Malware payload (Mirai)", "value": "7c2722a023ad6f017e581e9fb8c08e44b7b185a203c3d9d97ff391630326c723", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "ad48faa2-c918-4fee-9493-759d9731c8d7", "value": "T1B9557D59FD5E3C42E3DBF378AB4D87E1A21B71A0D32741A33982035C85969E9CBF09", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "9e52ec75-3713-4ef9-83be-7aff40e1f79f", "value": "24576:Me91y17YTPnTnwAu7kU185qBSmu11GjZs:UGn/C1QxL2j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882395, "uuid": "fbb741db-8f53-42b6-80ee-bb5d24826fb0", "value": 1322064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "b14ee502-9d16-4ec2-a7a6-78cfa16fbb9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb0ed62c-3989-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "00895ef3-9003-4136-a6c6-afae5cdd4663", "comment": "Malware payload", "value": "a8253461966811801ac5acadce6ca466", "object_relation": "md5", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "3e31099b-9fb9-4fea-8bab-2e544023a708", "comment": "Malware payload", "value": "8ca7e40244cb15ae90e5ee5a01b6fee90c23355b893e6a8a24b575d4786aeeda", "object_relation": "sha256", "Tag": [ { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "0c25c2a1-1acb-4c52-b0c2-e490f63a3ab0", "value": "T1D022B16D2B0EC2694FFA55DA999BC881DF7462263029DC1931EFD784DB2D084C73C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "a9296aff-5fa8-4241-8984-c6e5a3ec0eac", "value": "192:LXJ6sfjkJeFmKIw43+EPkzjgrPCOeO7GmJG6dHW+7PQfrlUxg6PQoGDU6UjGtUxa:LXJbfjkJeFmKIt3+EszErqOeO7GWG6dA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882395, "uuid": "1de43895-ab99-47c2-b562-c074e690ae0e", "value": 10389, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "6cc52e6e-0919-4b09-b53c-4c63bac6174b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb4539f4-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776882395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "b451d12f-4788-4c6d-b6d9-42aef1979070", "comment": "Malware payload (Mirai)", "value": "2149d8e10f9570cd5f64510d52eea942", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "cee043fa-f9d0-4117-8752-9a28f6970921", "comment": "Malware payload (Mirai)", "value": "10d31706ddc67d7a7a398b09da17354b7118211e084c876329f548534fd6ad29", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "76620faf-d7c1-47a4-9fe0-2a895a45579b", "value": "T1E4757C2EB2B2B17CE04BC03457DFC6A25531B0B536323D7B37859A712E66CE16359B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "a9333c07-ab92-45ef-9b71-e6ca42b89b81", "value": "24576:Nj2/rKjTnwaWPMz55NgES8bSyTgQLdVGSLh9ecUaqvqRzFu38yJuw4oIOTV5:x2GjTnwPPMF5NgnQguVtb38", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882395, "uuid": "70c6e6cc-305b-4135-970a-1a4e3709f500", "value": 1624464, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "0ca5e8e6-d918-488e-8779-a3cbc6ec266d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb4d7ec0-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776882395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "470aefb7-4008-4455-80b9-30e64f3560fc", "comment": "Malware payload (Mirai)", "value": "b7627bc728194c672189ab314ddc0b6f", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "9e1b3429-15a3-4e3d-8a7c-10db044caf92", "comment": "Malware payload (Mirai)", "value": "be0f28fc95a73db76b219941b09e9562492edcf6f290b7ed9da8116702fc2829", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "3f22b902-db0c-4519-83e9-ae9707ef80ec", "value": "T197857C98E7C794F0F26300F0065FD7B71624621A5053F6F2EF896A97B4337527A262", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "eeb4b85f-4f32-4f78-8722-63ad3ec8f15d", "value": "49152:D+ZSVvWxCnSQ7Z33hCEhhzxoqJi+TloBK9oqa3:D+Z/CSQ7Z33hCEhVxoqJi+T59o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882395, "uuid": "5884ea49-f2b9-484c-96ed-507726e04d79", "value": 1719748, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "fc47db02-0069-459d-baf5-2c5cdc24f7c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb4e9b4e-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776882395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "15be32bd-62b0-440f-8531-3bf6e4136f6d", "comment": "Malware payload (Mirai)", "value": "c3e0983266c7a822344149e21f731ae0", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "c61d0c7b-e2d1-4db8-9c06-1c36678f403e", "comment": "Malware payload (Mirai)", "value": "85aa75f81407928f1b6df3781f328fd996c4e4fb2cfc298a41e917052df3b650", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "0601647f-460b-4946-8a1c-fd258925c19d", "value": "T1B505F1D9F79A2C46C4DBD53A504AC2819656EC6B73F393483E43A5BB34AD3714F283", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "734a68f8-e55c-483d-84fd-03299077fdf5", "value": "12288:ZdbvYo+VQgW35WgKu3CkEOm0/8UEoYmZ4/zUWoeXIZyGUaZrW4RzqIfpgpiLEjkX:Z9co5WQPEkYt7UWomIZybOdMc3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882395, "uuid": "9a30c99c-2153-45d0-99c4-b7c6d00cc12f", "value": 859892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "46669270-41a6-4fae-af6e-bd65bb576d8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb66318b-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776882395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "81dbc9e0-7e98-4c7d-8987-1eeb9bd7fce1", "comment": "Malware payload (Mirai)", "value": "f40d90c0a671e1e3679955ada520e8d8", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "2de670c1-1b0f-46d1-a619-4e1bec2a15b3", "comment": "Malware payload (Mirai)", "value": "8dfb4b6d9de0426e944b49d05fe8a62d71e34136db12eaaf0daf113d0ca4c673", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "509c24aa-78d0-4ba1-b66b-ed3202bd96e0", "value": "T150C50A3B7710EB69D275C63009F25BF0C6B620532AE26462B379C72CBAA111D1C9FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "28e20359-183c-40dc-a802-155629a0db5f", "value": "24576:pomm+gY4dO2RGUKaXrvdVwZ57K4icUDO9zGsN/aydsy:lopOAXr32K4icUDGPiu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882395, "uuid": "956850e5-2dc7-41fc-8427-8081d58ee5ed", "value": 2506404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882395, "uuid": "4828b2f6-aa9d-433d-8375-7c9577efd014", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "354332db-149b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882398, "uuid": "24a1b3aa-ccca-41bc-bd1f-b35bb79b1ec1", "comment": "Malware payload", "value": "2fdeafb457a4ecc1f929834d228469ec", "object_relation": "md5", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882398, "uuid": "abec5437-bda7-42da-a33d-f0450d324cbe", "comment": "Malware payload", "value": "4aaef3fb04a3008a4237f65ce471e904d5578ccea46d7ede277bdb527b3dad87", "object_relation": "sha256", "Tag": [ { "name": "payload", "colour": "#68a2f8", "exportable": true, "hide_tag": false }, { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882398, "uuid": "a966b09f-bff2-4104-8767-471fb1413499", "value": "T1F994BF03F3C38036E4A7067046AA5B26DEF9BE301635DA5757D01C89AEB16D1EA3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882398, "uuid": "9875477c-c211-493f-8ef9-079123b99da5", "value": "fc437fbe61dbc5f70e586740f3ad65fa", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882398, "uuid": "9f57bcb6-7816-4177-bf86-2d98e0d80933", "value": "6144:SCZF7349iVhY9Wcl2eo5dfm66hj7Syi4qhWkuoJBHtaQrAtRokizIT:Dh349iTCVo76Z7Syto7ZNk7T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882398, "uuid": "ba9478be-80d9-4cba-816b-5cf13d6c0c22", "value": 423424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882398, "uuid": "8c166b4b-13a2-4304-b353-4466b80e3ab3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df29c323-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "7d9fd8c6-f34e-4fdb-a62c-a7a879a39a09", "comment": "Malware payload", "value": "1443287ac28706eb73cb8dc69edf670b", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "92c342aa-ffb8-4f77-acdf-848178b5491d", "comment": "Malware payload", "value": "547248f2a5abe77b1d47636281462271a54e0bf694cecc1edfccbfc83de95019", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "0ca0c6a8-c400-4a1f-ba01-e46cbc26799a", "value": "T1DD11E4BA76B0A0F68EFBE820A3BFEA469561F6774471D1B0704E154D74C20A772E34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "7b367977-f1fc-4ae9-8324-885ccf0a94ba", "value": "24:nZAjQNOvJ7n5qJKJyTXvvayyhxVuGxy1q1odT2TTqh:nZAjsC5n5qkKv7yJuGxy1qICqh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882428, "uuid": "807d7cab-a7dd-4bf3-b5bf-626f53e90364", "value": 1097, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "c207437c-7349-413a-b63e-d3887d4fcce5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df34b8e7-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "818cd55f-2554-4495-8fde-03245542623e", "comment": "Malware payload", "value": "f1dc5f7d00388128a559b7a28b30a695", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "1f2e3dbb-e9ac-4785-bdec-685f18375fb3", "comment": "Malware payload", "value": "ad5cfa6a75be9ee08001b4a46db7b89c53e4c19836a600507efb8a333670b4ac", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "5f3a0b5d-4978-45e6-886c-28d47bfb2f2f", "value": "T116215BABB524A9B6B49FC1342A4A21016545011F41915C39704FEC7D2FD83CCB5FC6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "8fd3755d-9c48-44d9-90a4-43c794bd9e62", "value": "24:zuWWDjIJIKECPCQ5Xl+/ydjv6d/gSxL5x:zuzDkeKEcCQC/Ir6d/gSxL5x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882428, "uuid": "450f669d-63e3-4979-a0e6-edf7ecf8a02e", "value": 1230, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "48a8af2b-3147-4527-83e1-2aa7a27591d5", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df5531e4-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776882428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "2602f471-2530-47df-bbaa-3a8a5c8e04e0", "comment": "Malware payload (Mirai)", "value": "0f991ad5788ef05392c7e3697f776012", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "e508b4c1-d7a0-4103-be5f-946f6278b3e0", "comment": "Malware payload (Mirai)", "value": "d12c43c359c82e4a6ca3da6690363bf9b3f3e1d699dcf00e804b833d5d956f46", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "ffb39cbd-3e74-460f-adbd-8e76c1677a8b", "value": "T13D754D526B4D5F9BE0EF8F30C43AD16B065C29D362608A6EB7DC3F8D2E2D7560B814", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "bcce5e8c-3e97-4814-aeb0-09046dc9efd1", "value": "12288:zoTCL2jMFjsQQefaH/gMTpXbp3vF5wX61gAlk2tS9U4gRg0Qb/hkAiPBeyGw5AbH:zmPMFH2/gyX16eIqe0o/hkAiZVmwK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882428, "uuid": "3535713d-cd9a-4b8e-9920-51dd204489c5", "value": 1559816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "29fee447-6bcd-4313-bce3-5d2b4c4babc6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df58885e-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776882428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "71db9d45-0433-4f98-b4de-c0c5ce3f3cb9", "comment": "Malware payload (Mirai)", "value": "c4244cb544d4d149d5925e98298cb51a", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "11f387c7-16e5-4027-a623-da2ac625d372", "comment": "Malware payload (Mirai)", "value": "13f39a2bf8277c15bfa776d66b0b18b817aab3218a489a9b668daf4d6023b380", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "e9de7eee-0301-431a-b7cc-6726e12d543d", "value": "T129953A273348B785DF866C3BC59BFD103386758906524996BB40131FEBB5B2A8F4BA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "45f3fe45-4002-4c83-976d-83c60bfc68cb", "value": "24576:tB0ea2s4lDio6Ywrq4utuTpZBVaRwJFz9/veNovMs14PBMouodSwpyoUm7WsFKOL:tS2s4Nio6yIVN1/mNov2SwhSnbsU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882428, "uuid": "c272522c-ecca-4596-8a25-b76a5e41f063", "value": 1977704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882428, "uuid": "2d3f398a-e1e9-4c62-ba3f-3bd2ae02a1b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df656930-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776882429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882429, "uuid": "c24ac0d6-1b5b-4988-8e0e-a666f585b564", "comment": "Malware payload (Mirai)", "value": "1e38ca3facea41b3d526b359081f866b", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882429, "uuid": "deda6839-0296-4fbc-9b91-40a639360443", "comment": "Malware payload (Mirai)", "value": "9215c4dcf9f145ba618b99f024a43d7e6a547e15d80a960c514bdb5be5655893", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882429, "uuid": "144c5a76-68fd-4136-8332-5abaa8abfe64", "value": "T148756D02BF845EEBC45FCD704A3DC34714EDE8D752D5A63A71BC8A9D7A6920A4AC34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882429, "uuid": "cbfdfa57-9b06-4a27-a8ea-d9b8b8be1599", "value": "24576:bWhsVuED65ztnBY4WJVQw0qAIcG01fAWtBsUcNWz/fhwC2Un2vs6VsSsrq:JVItBHWJ29D1Jc6wrEWs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882429, "uuid": "5d9bcd63-2142-4766-83ab-035059e1a2d7", "value": 1614968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882429, "uuid": "8a6e63f8-5179-4d8e-b1fa-bc96f80169a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01ded87f-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1776882486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882486, "uuid": "cb5d5a01-c919-4b4e-a959-c1b4b7ace629", "comment": "Malware payload (Mirai)", "value": "6bb58ba5e8063f7b6b184c5006e6a4a2", "object_relation": "md5", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882486, "uuid": "0b68a304-16b4-4872-a987-3ed515f47128", "comment": "Malware payload (Mirai)", "value": "ddfb98e8d13984a2763adcf061b593941e3bb99cf11cad76f66a95a3a95fc59b", "object_relation": "sha256", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882486, "uuid": "c932ecad-7708-4800-b4fa-0cbe042e15a7", "value": "T1C7655BC7AA39C9C6D0717D37D266FBF192AB367548D85E4C8C9CE32644B1301CB16E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882486, "uuid": "350af469-22c1-4f59-b918-8dff4c977544", "value": "24576:53n3dEdW7yq/4NAuLe/ChGnv2yDOG/2D:BdEdW7zCiVO3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882486, "uuid": "235de54c-6037-4178-8a05-0c3543fdca63", "value": 1432520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882486, "uuid": "eec3ab6e-19e4-4602-951d-5819a23146b1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f9e2f52-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882590, "uuid": "0b8504af-1e78-4742-bb6a-8b775c709dd9", "comment": "Malware payload", "value": "06c7d4ef9101051a691d7fbf1788ac11", "object_relation": "md5", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882590, "uuid": "83454fa0-8e84-429b-b7de-bd47e6441f06", "comment": "Malware payload", "value": "a86214f97c02e40ab21b8cf369acb3c1b6250011960afbc97e04040b2ffa5fb3", "object_relation": "sha256", "Tag": [ { "name": "BRAT", "colour": "#a29842", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882590, "uuid": "00708a18-2161-402a-b71c-5eef6bf8ef3f", "value": "T1AAF23A487B98C12BDBAF0E7D75621A50167196621203DFD53ECC64EEFF937048612B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882590, "uuid": "1a7c9aec-7694-4652-b4f4-706aa4e92a24", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882590, "uuid": "77991679-4979-408f-9a35-5007be541a53", "value": "768:imQZqx1lYcTYbFyf8qbIjPjnbaoXbYC10ko0C:i0lYibIjPjRbPod", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882590, "uuid": "fbe2550c-9230-46d4-b938-8f635ccefcd9", "value": 36352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882590, "uuid": "5454a56b-7301-4e79-b41d-a7e1c8581a4e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a290786-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882608, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882608, "uuid": "90eb8498-490b-4a7b-9e60-9088b6bad014", "comment": "Malware payload", "value": "9c04b18e66a2010615e453afce18c9a4", "object_relation": "md5", "Tag": [ { "name": "158-94-208-60", "colour": "#741d69", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882608, "uuid": "f53e9051-cc8a-4e13-8a02-cbb70a324a79", "comment": "Malware payload", "value": "ac132e2f02f64d2623e776486b6844f93edce4a08dbd0879d8748fd4671e637e", "object_relation": "sha256", "Tag": [ { "name": "158-94-208-60", "colour": "#741d69", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882608, "uuid": "6324d2fb-f938-4b0a-a99b-08d4b85ae51c", "value": "T1FE634A0376E0C072E8724E3519F485518BBFBD529EB49D6B3798029D4EB26C18E38F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882608, "uuid": "7bd75482-310f-460c-a8b7-bd0f9710cb08", "value": "80b89b18f355b889f93accebdcec4bfe", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882608, "uuid": "f1bf6e35-2533-42be-a02b-ee43bdc140fc", "value": "768:Hu91QojVMNCvvzdnBGzJ/YNSNK0cNWIioLsWjcdRPBu7mLIjum9hTQ:Hu9fCN+dnB4cN+asWjcdbrm9hE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882608, "uuid": "4c50327b-837c-4cca-b914-626217b97b11", "value": 67032, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882608, "uuid": "347da4a9-8bc6-4bb8-ac6b-c99814279782", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98b54df3-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882739, "uuid": "c9360f95-421b-481b-ba95-d1cacde212db", "comment": "Malware payload", "value": "a7e4b75324c5cb599fd5074631705559", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882739, "uuid": "b394ecb6-5f07-4dbc-9dc4-1d0f58bcd1b9", "comment": "Malware payload", "value": "e01190a6aaac157ffe505f8e24c025f0b915c288f53a04a0cafc48e0613fe156", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882739, "uuid": "d292dd29-bca8-4b41-83ee-1baf95df4408", "value": "T1AA75D153EB090F9BC0EE8B34C41A829B03686D935552C76EB69C3F9D6F3E3994F815", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882739, "uuid": "86d57172-409b-47f8-a34c-b1c777eecd35", "value": "24576:xxc/VPsVv2PnS3333333333333ZI3a33333D51uIOwnW6n6OpVIZYQJ97E1giBiG:SPS3333333333333ZI3a33333zFWgrpp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882739, "uuid": "a203dc04-4a40-431b-982b-1cf9b64a211c", "value": 1563591, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882739, "uuid": "939ed43f-ca5e-416f-98c8-7fc8a8776638", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98bc10e8-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882739, "uuid": "d3104c13-97ec-48bc-bbac-bb2c19bcd9f7", "comment": "Malware payload", "value": "2682718f9ad75aa6831b32cb195c3cd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882739, "uuid": "6fca0a1c-81c8-414a-bea9-86c829726332", "comment": "Malware payload", "value": "84868df86b28156c47013c151c0cada4577e39fa224f064f17dca91631a3bef9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882739, "uuid": "5d939423-b1ce-4eb0-915c-d1fa8e8ef406", "value": "T189350152BA295F17CC964279C497C234637BF0818B82B303B548E6797C4736D8F1EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882739, "uuid": "f957d878-67f2-41ca-b49a-4a4d8f432429", "value": "24576:l0tqcI4qN/1sfElJokJ56nrGn+lANswBzyAdCWn9gvzvqjZAF4mWZ:aiN9kiUyn+spyAdrGTqlAPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882739, "uuid": "97429c90-e74a-4976-a464-8f8ec03b2d44", "value": 1074006, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882739, "uuid": "1fe2c5c3-6db7-4f03-a815-4c6ae9e05b1a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98c17eb2-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882739, "uuid": "9c418ea1-2e4a-4122-912a-1b171482d7dc", "comment": "Malware payload", "value": "173c54079b719f6a731fa296260bdf4a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882739, "uuid": "42600f8b-4c24-4866-a9fb-8fcda50febcd", "comment": "Malware payload", "value": "0383995467c4dabd74033b3d1850ed4dc1f34034c0117d8ab84a9bcd31c87e45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882739, "uuid": "4eedb2a2-daac-49a5-9501-eb1909ed01f7", "value": "T16055E09BFE6E3C43D2D6E33E9F8AC3A1532BB191C31351537981432CE5CAA9C8BA15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882739, "uuid": "57eb58af-c9c7-4d9e-8086-eefae1af8478", "value": "24576:dJ9uTMBCNwyCeThYVf+QcNkBsrEVMsthY5/FXA8k9/mM:tr+of++BswuyY5kOM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882739, "uuid": "102ee89d-cc5f-4746-927f-fd7a7bb2f403", "value": 1359327, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882739, "uuid": "f7d8d9e4-d89b-4da5-b700-e0a08d98fb41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98c2561f-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "1c50f00b-e0ff-483b-85e5-7a873015c341", "comment": "Malware payload", "value": "9256424eb44d7e6af55271ad568e2804", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "71e3afd0-ae88-4913-b1b2-7ad9c3d35cf8", "comment": "Malware payload", "value": "74f2324c600b62b3868dcf73ed714a414d15936738aecf90bd510531652f047f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "8565c604-cb59-4782-bcf9-9fd3fe5bcc25", "value": "T10965CF9777248996C0706A3BE1A7EFB183677E3115D86A0F9D48F77608B33048F15E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "6537132e-b44f-40f9-af35-793c3307bd3e", "value": "24576:fBAXobSBtriTNEqnHqQsV3TpXeuHEaPXjmNU6m7ROVv:KBWMIuHEaPTmNUz2v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882740, "uuid": "55792fea-96b3-419b-b105-86bca38d0f9b", "value": 1413726, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "7169184d-b8fa-43fd-b73b-e7dfd6754783", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98c40cb9-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "b70558e7-c7ad-4fe9-937c-89f1fc80f4b4", "comment": "Malware payload", "value": "40fe576c7d3b5e31e0c389a35a0b08ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "2e53ee14-8844-41a5-8a1a-69802338268d", "comment": "Malware payload", "value": "eec6a83cbf747d32cffb41bb1d867e3d92c219088d01e0f8512c29c13714145a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "9871b697-93d2-4354-ad0e-3f8b3dc9580c", "value": "T18665CF02FF805FABC0AFCD30492EC35711EDD98656C1A62A71FC4B9DBA5D25A0BD35", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "d6447de2-9127-4343-849c-113edfb553fa", "value": "24576:ZYnr5PrLsOf860KhwVfLeyxFuBW+Znd8Btj6tyyJPJKZqBuKS:ZIrLyrVTyBRZnOjMKNX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882740, "uuid": "048ccab9-4ac5-49cb-8f7c-eb9a0d137fa7", "value": 1432058, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "e85b09bb-fefb-4d0f-a64d-64ec6be67fb7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98d3efea-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "4b177a58-8c8f-4731-b3e2-b678cc3abc00", "comment": "Malware payload", "value": "25917aece3b29bb873ef996ce09977fe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "b0d21993-58d1-4e4a-bc24-9b72716a8e61", "comment": "Malware payload", "value": "e0d5db8172057472d31d58a73096a73acd5434619855ce0ca141ccb8323e2943", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "52c37a3f-0d58-4b79-8791-55c660966752", "value": "T14E75D047FB184522C9530EF0197F43D9F7217A5341F5A22A370EA7672622E39DAC73", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "bc53935a-e59b-4151-9d8b-90a33d8e99c1", "value": "24576:xHUcf3MuHMwp1W6mYSWgZXpAvMsqJbHJPPNqvCXi4qS1F9EY/aHo/HGrJE0:xHUcf3MuHMwpsdZXpDJDJnNDS8EYSIof", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882740, "uuid": "98954e8f-f8d9-475d-9def-4a6ceb105a5a", "value": 1575163, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "eea0b044-c881-4ada-a24e-ee9609a7b8c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98d49d94-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "25efb920-44c1-4cfd-970a-f9122113ec53", "comment": "Malware payload", "value": "487c01f77d2e1177b1ef8fb223eee375", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "915c2bd4-ae9d-4354-842a-ffab0d6b05c0", "comment": "Malware payload", "value": "dceea604d2c4f434676fa12d255f2bb1269bf60c10bb93c186c1c06555f8999f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "cc5bf518-47ab-4ae9-b2d6-f2248a76a5fa", "value": "T1C375D0A173865563DEA88B3106E38370A7F5392152F3425EE316272C0F725ADAD1ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "650119e9-2ef9-44b0-b401-567c61880914", "value": "24576:TD1HGqhZd4FILjPYubEn206uIOQjW8mRygboInyFfTKJ1O88rNNLVGAHsoYfYms:PZYILjP/Eh6Hq8QFyFfg1O8EVGAHmwms", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882740, "uuid": "4d673117-780b-4d11-873d-4c4eca360df1", "value": 1563542, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "a87a512d-fa0d-49db-a3c9-571de40f253d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98db073e-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776882740, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "b9b79ec2-2054-495f-8992-9287cb90d073", "comment": "Malware payload", "value": "687af4d054311a9ff8c0cdcbeaa2e8bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "1e94ac72-d432-48d4-9113-66d6bff9c0a6", "comment": "Malware payload", "value": "2df8db7486db8179a3a9ec7814f0c8188379c860ec071167336edbc6764bd5a1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "ab6a5f86-21f5-47ca-91da-630fa8fc2f81", "value": "T1B095E147B2F375FDC067C030835BDB626936F46541226D7B21C4DA382EA6EB01B29F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "603830db-92ea-413a-8018-8f2b46c5a017", "value": "49152:A19DV6Ab6AGREzu2GAsy3P2YHmSMHDYKi59+:K9DV+RW0Asy3PnHKHDYq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776882740, "uuid": "9a448f8c-ed4f-4962-95c4-f16ce067c8f1", "value": 1892243, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882740, "uuid": "ebdba93c-13a5-40ef-9e25-eef0514b5f39", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "80cdb73b-3e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776883988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883988, "uuid": "b66c765d-6d87-4138-923d-f5e593e9258e", "comment": "Malware payload", "value": "910f594f9f2510f8b7ab1fea5000a3b4", "object_relation": "md5", "Tag": [ { "name": "158-94-210-217", "colour": "#767df6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883988, "uuid": "d3e0c6b0-72de-4139-954e-0488dd0128a3", "comment": "Malware payload", "value": "0a4cbf5ec04c110ad64ed20a278e09de966c414995960aa65a8ca4925be43959", "object_relation": "sha256", "Tag": [ { "name": "158-94-210-217", "colour": "#767df6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883988, "uuid": "8f59681e-ba65-42d6-a1fe-b2cdaf36254f", "value": "T177836C43B5D18876E9720E3118B1D9B4593FBE110E648EAF7398422E0F351D19E3AE", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883988, "uuid": "ceaa55b0-b5ee-49f2-832b-98e6a858bf96", "value": "37d5c89163970dd3cc69230538a1b72b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883988, "uuid": "2c93a1a9-6c02-43dc-acbf-5d1c990cd3a0", "value": "1536:SxoG6KpY6Qi3yj2wyq4HwiMO10HVLCJRpsWr6cdaWPBJYYD7DJno:wenkyfPAwiMq0RqRfbaWZJYYDJo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776883988, "uuid": "5d90a124-195e-410e-9d0e-baedf12b090b", "value": 83176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883988, "uuid": "fa242034-ac9f-4773-a890-6cda3e5e0ccd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "200b369f-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776885973, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885973, "uuid": "bc7e2fa4-9e96-474c-baf5-a103e1c1cdbe", "comment": "Malware payload (Gafgyt)", "value": "a36b56823f264847c260d27b1a7b24ed", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885973, "uuid": "de29f64c-d1be-45b3-88d8-f267162aa7aa", "comment": "Malware payload (Gafgyt)", "value": "846e22b461fc3a1c36bdca43eb22de12e5b5ac4d0df6860582ffe4195b161fc6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776885973, "uuid": "7be9c447-b63b-4413-82fd-6a265ed3853c", "value": "T1C8832B43E9A19FB7C0866A7565AB5E300B13E9912B4F1A4A313CA7F8434F4CD790EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776885973, "uuid": "54c8b68e-b5d1-4b77-8dc8-f73de8ce0650", "value": "1536:ClNtAyOXSU3rUk954CKmg0KfjyJCjujEaX9LmkxVqOEeofzee:gbOXSU3rUkmmbJA94LmkxVqODofzee", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776885973, "uuid": "f844674e-b6b4-4e07-9082-fa2d03b95016", "value": 88733, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776885973, "uuid": "ab5b9725-c17c-4dec-9b0b-7f4f809eae90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "426a7c7c-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "5b174d05-4b43-4ccf-ba8e-deb09dddd4a9", "comment": "Malware payload (Gafgyt)", "value": "77f1df7d046201749c855fd483dd7cfa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "8dd5d48a-ab22-4d41-b7e4-cb168ae0e37d", "comment": "Malware payload (Gafgyt)", "value": "b99c0cf485b3d1b69330628f5e602365fd5b67c8e82c87dc2e5b7903375eb0e1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "4999784c-d686-454c-b7d5-4cb3a5bbfa8e", "value": "T1D6C39517BB618FB7D81FDE3305AA8902108DE58A12D96F6BB2B4C52CE74B94F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "6227b460-1dc9-44dc-a7ff-410b3edcd136", "value": "1536:/RHeTECAms/Y8Zm3lKYA43gMJwSkJ8EplyDzUh8rmW+IFB1Df11hR/:/R5LqAmgMJM8EnyDw8rmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "8bdb411c-8d71-4a13-9fbe-2223f805d1e2", "value": 126042, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "03e9b94d-fa72-49ce-a6f1-364fd19c5e4b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "426be51f-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "c8b2502c-8f36-4031-a266-4f4c7cd4ac93", "comment": "Malware payload (Gafgyt)", "value": "6cec28aa9c5ccf6b43738a78ed7b9f43", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "97888cbe-aafe-485a-88fb-a1731c1bb2d8", "comment": "Malware payload (Gafgyt)", "value": "267da67cb171033f8071bde68dd26e797455550452e28bb06a53bbcdb69a9a27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "dd617411-3bd5-4df1-8842-6f93b7d0d80a", "value": "T12E833B02E643C6B3CC8307B2029BAE661931BDAA5E2ADF49F31D7DF49B128C47116F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "d66647e2-a6a2-4e1a-8aac-a484f8c4f954", "value": "1536:qr5b1ZU4d3J6lreu5r4hWj8LqGDloRmF+wVOz+sXcfW7k:wb1ZU4ZJ6liuq0YWGoRmEwVOz+ucfW7k", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "3b6490ca-9bb4-438a-a43c-966d4adff676", "value": 84999, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "e34aacc3-6b43-45bd-b818-de5c8c25dc46", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42745969-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "048ba701-5f06-4028-b622-be98737538a7", "comment": "Malware payload (Gafgyt)", "value": "794e81e6f381a1d09c1db9e14128fa76", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "051a98cb-28d3-4a13-9b60-9fb7047f1a88", "comment": "Malware payload (Gafgyt)", "value": "5d68dfdfd725bbb5370c59af3d1ca1830abd935890b0d484c2c3ab72f3a4f0d8", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "418c8904-0817-4964-a673-e0cb627dae81", "value": "T199F33A05E6408B17C1E2277AE6CF824D33339B94A3DB33159938ABF43FC27995E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "51c5f8d0-b96f-4df6-a0f9-f4296dccece2", "value": "3072:f1g2iIFdVzqKA7Y6ISag0/ReqnyLRM/9lzNmFwfBxKQodn:tg2VFdVzBA7fISanMqnydM/9/mFwfBxE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "c72aa51f-bc55-416e-9ec6-7a4b6679b27a", "value": 159896, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "c6ddb888-0362-4220-8fcc-53997565e804", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "427464bd-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "feaa7a02-bb39-4ac4-aa12-6e5918762ad4", "comment": "Malware payload (Gafgyt)", "value": "fe33042baabb5ad14387809589728256", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "154fa8db-05b4-40e6-9521-bb652f782d7b", "comment": "Malware payload (Gafgyt)", "value": "680fd296ead1f8a850165a04bbd52ca76fefbc83d38833028207a909080f788c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "8c7ecf06-f553-484d-8da3-8117ddae89b0", "value": "T18DA30897F900EFB7F40AE67604D34B24B670BBE54F531622721739A6AE722D42823F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "1a886536-af75-4954-9ab9-db9f11e39393", "value": "3072:HNKLGdUvuXwyKQlU8fzWRmumuxVqDr78fz1e:HNKLGdUfyKl8aRmumuxVqDr78fz1e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "5490cfc3-d9d8-4764-bc58-091d8ae05a8a", "value": 98923, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "af9e74c4-ec17-4c58-81f1-805e943db275", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42794b3c-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "14392f42-d67f-4ba4-a09a-34edf5b37cfd", "comment": "Malware payload (Gafgyt)", "value": "00906ef1d1743fd046325525f388eff4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "54397ca8-bbaf-4f2b-b0d9-de4d618df20c", "comment": "Malware payload (Gafgyt)", "value": "e5edf3bcb6f332ec96b3ab188d34b942fa36a51776918be26fc1d21af1d98549", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "68187e76-ed3e-4f2f-b1fb-029a3c503213", "value": "T1DBC3842E7E12BBBEE668863107F35F70879521D237A19382F26CD6181E7128D1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "10a972b1-43ce-493d-86ae-7027ef07445d", "value": "1536:g7je1TYGq+f+A02rKXzeve1eTe8p2rKXIeum9Y0GAzQj1l72HBesERLWfRZrmW+i:/a1UW0MZQHCB6RZrmW+IFB1Dt1hR/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "f26d2302-3729-4e11-9b9a-08c8ad14b74e", "value": 125962, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "5f099ad0-8dfb-4fd2-b855-8333312fee9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42807124-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "8cdd63d2-871a-43b4-a13d-3d6cf7c38e02", "comment": "Malware payload (Gafgyt)", "value": "e8bfd3496772e5be6059e8b0cce0b666", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "382a8450-9f76-4555-8263-75de42013b5f", "comment": "Malware payload (Gafgyt)", "value": "7c99506876f33d8aa2ae64a6535cedfda17803c6669adfd99817452d8fcd940e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "acc04fe0-83b2-4eda-865c-12aec4e0540c", "value": "T190933A47B71C0B53C59B5AF12DAB3BF08B69B9E013D76185A10AEFD00372EB12512F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "5acb444b-0454-4b0c-b9eb-b7cd35975b0e", "value": "1536:9QK1n/zXzxuPz5tq57MBtcaKECp/dC1k+8LMLumXxVqDrstKfz9e:99bzI9dtcaT0xMLumXxVqDrIKfz9e", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "164f3762-e52e-41e0-816c-649e365e570d", "value": 93907, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "2ba11b92-e481-46f4-8890-738e693c5b2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42878c5f-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "5d85cbdd-f876-4d09-a53c-3a6348d3a4bd", "comment": "Malware payload (Gafgyt)", "value": "834a5478fa3f900d830c85c74e647871", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "d8ac4e72-d653-4d61-b2ca-429e65a9076e", "comment": "Malware payload (Gafgyt)", "value": "2cf3d3fcdb6f2e131d07533a06bf0f1e867bb1c709d42848b084a770e2eb36d8", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "563fda97-7fef-4aa7-9af4-f110394df94d", "value": "T161B31845F8408727C3D327BAE78E478D3B36579467DB33116A38BEB42BC17892E295", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "c445bb80-01bb-42a1-b4bb-7d6ad1e75098", "value": "3072:MSk+U6m1qW/w8clPbiRq6AmkZrQAhPDCXFke:U6mgW/1clPXmkZrQAhPDCXFke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "f8ff1e7f-5004-4cef-86fd-38d747bba3e0", "value": 108417, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "3156e5c9-d1c5-4b26-9e98-580697bf2af8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "428c2c29-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "248d563a-8d4a-4861-9e65-180de624a11b", "comment": "Malware payload", "value": "069202e054cfdb9828bccba719bff6ed", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "6c89be91-16ca-49d5-8b00-58ff35bb37d3", "comment": "Malware payload", "value": "ea84af2f8981e23d6ad01b42a446eb3f63dec940d8b219d95238bab0eed742f9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "577b5db6-f78d-411a-8344-7a057e0f8f8f", "value": "T1194164CB205207F36DA0E83337744490F4D1A199A8D59F8B6EDC3DD84CBEDAC65496", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "79aa0161-f613-4ce8-b59b-ccf7a4091fad", "value": "48:1Qd8R/ttQdMug1bTpYTuS2LywtL335vLywV78T:1Qd8R/ttQdMug1bTpYTuS2Gwtr35vGw+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "f99685eb-99a2-4a56-96ab-afcbb86f488f", "value": 2166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "3d5e78be-6a15-4091-bd2a-93e5be5c3f17", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "428c5a6b-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "c1bb1f12-591b-4b84-b801-5ec1f2ca5d2b", "comment": "Malware payload (Gafgyt)", "value": "e03c6d7a6cf8e395121d9f1dab6aa97d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "ff7037dd-8272-4d36-8392-64beb5d57912", "comment": "Malware payload (Gafgyt)", "value": "f09772480c9cdff4f200719e8e582ca47930e13804f947f14d01065fc4150fde", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "7441cb13-cbf6-4559-a1ec-0be6c2b860a2", "value": "T1E3935D27B552C6BBC08752B42BDFEA615833B4BC0B32720B33D47DA52B259D91E6DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "7ac995a1-86e5-4459-934c-853e58963826", "value": "1536:W7uJtxNeVE8zV7aDlvhE1hmkJ0S36W6bWjK39yPXfH0mA+KWOXFseaZYxe:4SsVEeVMlpmXJ0O6WpjKNifUm/KWOXFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "2c8a1f12-4566-47e0-93ab-1d7049b67577", "value": 94679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "75274cce-5860-4e00-9953-f6227699984c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "428e4895-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1776886031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "d48c532d-b7dd-45c6-bc50-427efb558001", "comment": "Malware payload (Gafgyt)", "value": "7cf193f6bb7ac9c5d2fb2d7bd43cf3b7", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "7c32ccde-1512-423d-9f81-6671c5e1d71a", "comment": "Malware payload (Gafgyt)", "value": "c19726ed570a5131152659995b1d5d7bdf9171b6878c54b99fae7b6d8e337a8e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "f396aeeb-c3b6-46bb-a2e0-6e314795e6c9", "value": "T160C32805D5508767C2D3237AE79F825D37325BA4A3DB33215A34BFB82BC27891E399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "dbd56bfe-14c4-40c4-a62f-e06b85d94229", "value": "3072:WkYPgPggnAb0JWaY/VfYEDx0dn+mTQOY5NX3cn:lYPgPggI4Wa8YEDW+mTQOY5R3cn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776886031, "uuid": "37fe92b0-12f0-43c8-b644-2efeeb4c3dca", "value": 121007, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886031, "uuid": "b7ce9ad1-fe03-4b1b-b812-ee526f11f742", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0f220bf-3e84-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776887612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776887612, "uuid": "6e000976-9bb1-431f-bd86-fc26dc7b25b2", "comment": "Malware payload", "value": "270fc968c3157659d0c16922fd4e152f", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776887612, "uuid": "c4d5fe5e-7be6-42d7-8e29-983c659806c8", "comment": "Malware payload", "value": "0899b864bf2f1228fefdb6237f6ff04cb8546c6447b33d1d8efd45ff55ef9e41", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776887612, "uuid": "26688778-22f7-40e6-b50e-e4a11db27632", "value": "T10D646C1179C48032C673383147B9E2B28DBDB8302D655B8F57A81D7A9F741D0EA29B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1776887612, "uuid": "1b65344d-027a-4a50-929b-e47c2d9bc3cf", "value": "c2fe6927e1db8cf00400dbef9e5d35be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776887612, "uuid": "9e6ef1b4-5f3a-4842-aa97-9bb6c6ee74e3", "value": "6144:pmlfAgiw7Op5ryNkS7Z12wvtGVG3iVt8eZ1u2J/xFti9q/Ro:81iw7gryNkSV1hy1Z1u2JLI9CRo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776887612, "uuid": "e11a835f-572b-4532-89be-0e3bbde23856", "value": 312752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776887612, "uuid": "7fbf4fa4-c9d0-4be5-a8e0-de91efd4fac7", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9af3fba-3ddd-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776892832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776892832, "uuid": "c512ade0-1115-41cb-8895-70f0b89b8da0", "comment": "Malware payload", "value": "5de89b9a6e9a1d42d5496ea62c8f3c02", "object_relation": "md5", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776892832, "uuid": "a6474b24-73ab-478a-882d-1155c953c56c", "comment": "Malware payload", "value": "556d7ad21829665b496fad39f0024663d38c96beec4904e7a00b625a84d5dd18", "object_relation": "sha256", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776892832, "uuid": "58de8cc5-9e68-4ae4-b4b5-794989681499", "value": "T1ABA83323A0CCBBAFB4389436E753D5184C58EA7F175BA3EF462593FA499420097CC1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776892832, "uuid": "b9e4a0bd-a6e9-4192-b7e2-7636de136526", "value": "6291456:4GFt6/+4EGCsksl/V6tDhe+2yV7wGqn3WG+saYH:9bU1CrQ/0hnlXq3jBH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776892832, "uuid": "ab6b75bd-7b78-456a-9807-e7c35b5ba563", "value": 207714742, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776892832, "uuid": "84e6d7f1-992b-4011-a2e2-e14d8030cf52", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d218880-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893726, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893726, "uuid": "2948f23a-7ebf-4ea7-baa9-86a3a1986408", "comment": "Malware payload", "value": "21997fb8e9ae221235459f92b4bd06b4", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893726, "uuid": "0407e9d6-5cbc-4896-89e0-0245f27defba", "comment": "Malware payload", "value": "3b252ac77c79724fec975cc64721f1050afd211fa73e849b39232f703d124720", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893726, "uuid": "a094b9a1-b4bb-4e90-9055-ab238a26d692", "value": "T1E394E142FB442FCED667833498C6D9185F28F58933FA6F813A939468BC151368FA97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893726, "uuid": "911ca83a-803b-44d0-ac5f-3dfbded453ed", "value": "12288:C6+4Av29V3fHUQT/2QHm9XMaFjYHg9yx1Wkt:PUC3fHLDGFCH/v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893726, "uuid": "08b7292e-7185-4714-9df9-3e61d6493ceb", "value": 411085, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893726, "uuid": "0a9373d3-da99-4c56-ba09-aba7c4b47bc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bee4dd3-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893778, "uuid": "9457924d-876a-4ad1-a0bb-35cbcaf25125", "comment": "Malware payload", "value": "e45dfc893267d9171b94114698d49e31", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893778, "uuid": "b629c4ba-98bd-41c4-b73d-f4cf45225d4d", "comment": "Malware payload", "value": "35dd753fb9a0b4e2a3c688974f08de8e714aedd7c47aad381caffc058850a3bb", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893778, "uuid": "e9b2e41a-ce11-4c92-a703-5c346714a12e", "value": "T16C45CF06F8809F62C5D12976F65F8268731747B9D3EB720699189B343BE792F0F3A2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893778, "uuid": "06c55291-0a42-4aeb-904b-e1787451552b", "value": "24576:6z/qLvfxB+6qHxWiOeiJnaGYTAlR1wUHwRTH9JdZRVopVCextfMaZ:6kfxB+bxWitGYcw2wN9JHopVCyqaZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893778, "uuid": "1265235a-ba38-4c6f-8133-86b41462bd4c", "value": 1240901, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893778, "uuid": "3e2e67eb-8e4d-462f-a504-4b5a7cca930a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e7eb4d8-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893836, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893836, "uuid": "963e7ecf-e2d6-4327-b05d-d462977701a2", "comment": "Malware payload", "value": "748b055c6cb8df1ade90e9e679ce0bdf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893836, "uuid": "b74a6879-8347-4beb-a467-fc545bd88c01", "comment": "Malware payload", "value": "d2494d4330afe3469558b7263a319d667813a5ae8ef68c4fd377592aa19b20c4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893836, "uuid": "d476fd80-5502-4e47-8101-87908a0b6274", "value": "T19275E09AF793D8E2F25341F5024FC7E2057060266057FAF2EB44AA7678767922F163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893836, "uuid": "b2370934-f163-46f0-8813-25a3f14bb405", "value": "24576:UaZSKQphYuhMEZ10ObJPFEnPV/wyQBWPBnMwcdkHd6A19kIQMIMX78DpE71D:FZSKQphYuhMEC9m05k2Hd6SkIHIMpD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893836, "uuid": "7756f2c1-7cf2-4941-a9f2-71215351ce79", "value": 1595663, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893836, "uuid": "a52eae1e-5f3a-4228-bb34-8c0cb9a5bb4c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6fee846c-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893838, "uuid": "006e64f6-3fb0-46e4-89e4-b372a4ac93d9", "comment": "Malware payload", "value": "080c67ef949573321c7ce42442f4d4c0", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893838, "uuid": "dba9f9ba-b07c-4001-bedd-c86fed49febb", "comment": "Malware payload", "value": "85a1a157d26e615e0ad221a962ab7cbdadb3aaa21d1ec0894d112a11b91aab95", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893838, "uuid": "48aca8b8-1126-423c-ba75-9ef777e8149d", "value": "T16A465C96BC5DA462D6C976742F6612D53339BC448F82C3232A24B73DFAF635C8F122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893838, "uuid": "f2ed3ac2-610d-44fa-98e8-85153b2f7bc5", "value": "49152:830hbX0/kBX2kxIAH4Ws5AErE3kW7Z149qe+Yu62VjdqW0CuDye5Ef:83KIW4Ws5ZE3kKZ14f+YYn0Ef", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893838, "uuid": "5e85730d-6c7e-4cfe-8605-538ad31d42c2", "value": 5767352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893838, "uuid": "831d1211-693a-4155-825f-d0f281dce4dd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70acade5-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893839, "uuid": "57406faf-e5e8-4ba2-8aa0-e5ba91396de3", "comment": "Malware payload", "value": "afce7d5cf910f8d86861ecdf50ad2aad", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893839, "uuid": "c3ad1f23-e529-4362-a165-d8c89e52b89b", "comment": "Malware payload", "value": "c403bb0db632967b5acb8bd1d5c5c135e3ea65908e665c3c22b2ca17f8cf7740", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893839, "uuid": "1c8981ab-6438-4184-8115-acbf3108fde5", "value": "T1A46618137A28EB0EC25821344DB1CA946B7A2C4942D79517B391F329F9F20AC5DAFD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893839, "uuid": "bacf2691-64a7-4ec3-98ad-4339907d1d05", "value": "49152:UJoroz2N5UaOuTlE6fHzSY27n1Q4y/XHIuJ5gQl0jb92b8l+VPlWvQfNiNHxvt5A:eYMSgQl0/68CTfNiNRvjEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893839, "uuid": "f7dcde0d-03cd-4028-aa6a-41fba6ff9e59", "value": 6815959, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893839, "uuid": "36671d67-a80b-43ab-a341-839eb6112d47", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "710d3e1e-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "90756657-90a0-4e19-b04e-956f640914f0", "comment": "Malware payload", "value": "b76df5dbde6804c69fafe2e1f59042f1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "c667d94b-06a0-4326-ae0c-2e90cd1fc59e", "comment": "Malware payload", "value": "ec0fae819ad870b0d4bcdc48956f3fe034389395959681d4e5058d9781aa95e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "af5c5d09-8541-4949-965d-b8b32d320786", "value": "T1D05608C1E9A1D24AC63D6D31EFE6EFD8E2673E315D885A4AC9C4F33E1CB214580B55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "5b006c63-7464-40d6-94b7-2860f0ee798c", "value": "49152:9H1oe4TB0Rizjhb4+OAv0pvDEA6PF+85PhnGomkqQHxwt5ET:9H1oe4TOREj3OR8ZPRwjET", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893840, "uuid": "7e1909cb-cfe5-41bb-97c7-ce6e5a0c96c1", "value": 6422712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "99268d94-6a7a-4c17-8a9a-68f5697188c1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71500f85-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "01e54f04-14d4-4e38-8054-5bcc30ce1005", "comment": "Malware payload", "value": "4c08d4311f674e4c13181f8cdbaa79c8", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "21dc0d6c-b143-486e-bb78-795ea2be40bf", "comment": "Malware payload", "value": "fde03bc5fa8e02322aec1950b3928b5f5c80747147f00dde3eee8ae72ea97613", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "4b39ed2a-a1ee-4e91-8fd8-fbd32d6359b4", "value": "T1EB562787B8D24942C4E43677B9BE80C433635EBA9B8752566D05FE383EBE5D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "4f80a01e-b1b1-4814-9699-20aa0ccc55e0", "value": "49152:0b/uDU7IBridiNjl4ID3ncLSrG1ocbZIrD0DJbOdC9c5Ej:0b/dIBridiNB4BVerDIOQ9OEj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893840, "uuid": "5f1e8ca9-11ef-4248-9798-41820498afd3", "value": 6029496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "73bb2599-e924-4115-89b2-fd5ff7e3291b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "715e6a55-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "1e0b7696-fc22-407c-acd1-48d3537edf7b", "comment": "Malware payload", "value": "5606ab172dad396d908157f8efdfe719", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "b77c8a21-1e61-443e-83c3-d7d456b23c6d", "comment": "Malware payload", "value": "04d07d956d97986fae22892325fd2a38c11387a29e570ab7c39a6cf6b54d1bbd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "dda3f7b6-a1e6-4a0a-95a0-fab90c06e615", "value": "T19C567C81FB089226D94A0E324CA30F74B3606D82C2E4CD6F5609F76F55B1AF65A4FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "740cf66a-801b-45f2-8387-1cc47da7184d", "value": "98304:NlAnAa1mUah55/mGAPD82tkXyr9K08sERjs6BP2RvjEs:RZL/4r8nPj3h2R4s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893840, "uuid": "142d9908-ae01-4516-bd65-def17c731a98", "value": 6029496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "386143db-79cb-4db6-b17f-f2c8f8cfd215", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7165f84e-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "adb97f40-2af1-4975-bb23-0d2f3179a86f", "comment": "Malware payload", "value": "944d475af1495759703a27da95b8efef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "da669e08-e7b6-4927-9746-70eaff9adb9b", "comment": "Malware payload", "value": "55fca40246251a757b6cf3353852f65cef12cde48ceb7396946224b0569125d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "ff224962-440e-429f-93eb-e479c1e01fc6", "value": "T18B66D919ACC42BF6C06C5B7454EACA5522B06D144EF14A2A26A4FFEDFC762347F478", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "221bac47-40b1-4e58-a6d8-65b3ec58295c", "value": "49152:uPRtxm8YiC47QmvMLq2dVByEcqPJKpP973LdcMt5Eqw:WLvMXV3P43yeED", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893840, "uuid": "5f2c1ff9-26af-4bf9-b117-7001122397c6", "value": 6815959, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "1294aff0-ee1e-40c1-a480-21f47bfdf910", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "716b49a6-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "60a98c3f-8e19-4352-b144-e10ad3f875e5", "comment": "Malware payload", "value": "84c854071da9332ec9d3ac25eac14cdd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "e07ee516-d105-497a-b06e-debcb44ac055", "comment": "Malware payload", "value": "d49f432a649a48a415f234bfc0af384bde42470bc688d53191c807dafa96345a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "9402d228-f698-4a43-903d-245120dd8954", "value": "T169860905BCC92BF7C41C4A3544EEC99222B46D144AF1466626A4FBA9FC77239BF47C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "48da8ef7-cfa6-44aa-8e05-dff918bdca57", "value": "49152:daBe5hhdfDfESx/gi6HDKAwNm88/OassG8I0RP5m8S+kHPbGNq5E3:le5HDhJPBwPbvE3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893840, "uuid": "5176460f-3c4f-49ea-a8e1-96a7021e3184", "value": 8323287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "5dbb22ad-7222-4140-ba2b-a8a6d1cec98d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "716c7de0-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "bfa15621-4f69-4a96-aa40-4b4ddfcc56f6", "comment": "Malware payload", "value": "d56d2c0d849bac38f965266f8cfcd0cd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "792ea897-a420-4381-a284-0cb0bd9e28e1", "comment": "Malware payload", "value": "24eebf16af67ad105c9aefa2d82a0ebbbd3ea0d3f0e313e15c6d294f7f1166f9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "a26f1ca1-804c-4e97-8e68-88d4307f935e", "value": "T155662862BF58DE4FD29632314AA6C23873D13D0481B021379756FB1D1EBE2A09D6BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "1ac46118-1f9a-4ce4-9c31-40801919974e", "value": "49152:mHn+/I+svwYbBLgxx1Y4Z2CPoTHxvt5Eb:mTQjPyRvjEb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893840, "uuid": "d8cb5006-5e70-4738-be19-48121db1266f", "value": 6750392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "36c59e9e-8aec-4966-8b7e-8ce2b61d8bbc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "716d11dc-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "b769bb68-7ad4-483b-b01c-fb19ad6f12f7", "comment": "Malware payload", "value": "008911760290799e1875a7d893cf0182", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "79ebf646-4de6-42fa-9541-08134861549c", "comment": "Malware payload", "value": "e9f439059d9f2ed5d7954345065c33995164fa700a3f43c0d7789545ceb2a807", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "eb272810-e66e-48d9-9add-f426c74899b7", "value": "T10A565B43FCA555E9C0EAA1318A629253BB717C495F2163D32FA0F3386F72BD06AB57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "c6d1b3c5-4386-48c8-ad33-88e07d90b4b9", "value": "49152:jB/YP46lKrfyTj8qCPCUIdGP1v3ahk7baehbOmXRbpf0gNhAxGz/I6jM8R5OHKQ8:jHXT9CWJik3aedJ70gDAS/fTOkvmCEm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893840, "uuid": "6403f4cd-7cda-4a18-8439-9d5f52461c15", "value": 6136100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "4ff3dd28-c762-4caa-8fed-e4af9be2b0bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71732a24-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "9cdcecae-1892-4989-bf62-b7f7d04a2eed", "comment": "Malware payload", "value": "cd95015edb17bb839a352ed614419fd1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "63f41be7-9577-4e3f-8c29-ca196ad81d58", "comment": "Malware payload", "value": "1e9440650545835ecf123987b6fbd13052dbda8d5d91f4a2790c1e021c9bf0e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "7ad65735-5642-4001-b149-a36ac0a57c64", "value": "T1C3660955BDC22F66C1DC137455FE625662603E458A92073323E4EBF83A7773CAF4A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "a2945688-9f93-4ee5-981e-c37cf70f6fe0", "value": "49152:pQUV2wIj4D4gRwl2RyU5vguYpZfuE5Y5Eh:pNUwi4DbevI+qEh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893840, "uuid": "318101bf-33c8-4482-8b49-3b38eb5e0c59", "value": 6750392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893840, "uuid": "e49473d3-8562-428d-8302-84e12467ac87", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7185bbd0-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "dca1eeea-507d-4fb4-88b7-7cfb4586901b", "comment": "Malware payload", "value": "12c83e8733d8dd008f9996c536725e1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "221e7eff-e140-4a98-913f-659e43ee925e", "comment": "Malware payload", "value": "e1479a140ad734cf373d5f6ede4bf4815123b74567ab89d88fa7d95e4d57edc7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "5bd12f61-ae5f-432d-9656-ab0114b53317", "value": "T1FD764A03FC6555E8C1A9D1758A629263BBB17C896B2027D33B50F3382F73BD06AB97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "b1ee3b6a-cb69-424f-ba20-66cb89b740af", "value": "98304:uh9U+1aJew6t49MJboi3xjVPCzHn67NEN:u5Qent4aNxRkaqN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893841, "uuid": "576ad313-7e94-4ee1-8362-4483b5bcebd9", "value": 7590180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "38123eba-4e7a-48a8-b6e0-0c34f33bdfae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71af6bdf-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "8c73c6e5-7c9a-4c44-81da-c43827192885", "comment": "Malware payload", "value": "da7c7a47bc04391f96f765a095a7634d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "b86cec18-45f7-4476-9fd6-e94def7c8985", "comment": "Malware payload", "value": "a6767a3a7430bd3041fc0191e1ca272fee3ec905f1af70c988e9ce06c3b63800", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "168c596f-e2c6-4c39-8ae0-3330d2c85165", "value": "T1C58617627F89EE1FC39431358EAAC23433D57D0081E024369762F71D2EBB2A59967D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "b9790ea6-b9e7-4b28-9090-e56a7639599c", "value": "49152:r31dO8h9EtoPJ0esa6PssG8I0qQsYfxQ9eUXCAHxvt5El:rW6RyYgARvjEl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893841, "uuid": "a30e7246-22e5-472c-92df-4e54b76fc5a7", "value": 8257720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "0b1d6ef3-b237-4966-a78e-414930d8433c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71c67107-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "9bcbb23b-4d69-4905-8470-ca7079f61ff1", "comment": "Malware payload", "value": "58a97f2dfd7193d38dd6e58e8a8251c5", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "86133921-5889-4fcb-91eb-da95d29eb820", "comment": "Malware payload", "value": "7a1b4267328c8576d05436c0af1aeb1723dfe95eda50994f16c4ce443f0c8e89", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "b23161f2-c28f-41b6-9480-b2e418e70f7d", "value": "T10C464A46BC1D64A2D6C976746F6652D47339BC089F82C3232624FB7DB9F23588F132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "b85542fb-c575-4731-88f9-c43652ce502c", "value": "49152:AHatGbX0/kBX2kL2u/i4o6ZmfaRpQrMCRlZ+AmPI4kQGfKRW0CGD0RL+q5E+:AHaC2uFo6QCRpQrjt+AlCgE+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893841, "uuid": "e2abcbf2-6173-4201-a478-f3575f0926a1", "value": 5767352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "4661ecc0-42dc-4c1f-a1b7-0f6ffc4743d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71da5bde-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "7b88eb69-660c-4228-8bb6-78f9d5323d86", "comment": "Malware payload", "value": "7270f61fa5121347cfe3e2013b3de3af", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "23928391-c083-41ee-b259-877829108ea4", "comment": "Malware payload", "value": "94e3cdfbbf81a9218064ade0697f7f7468cc44b1a33d8540d6e56dcd417267bf", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "8ecdaaae-0510-4fb2-8190-30f73644d3ce", "value": "T19986FA51BD822FA7C5CC037445EE63A622903E454AA1472723B4FBE83E7773C9F569", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "6a830537-9baa-45b9-ae88-c1cb148f0575", "value": "49152:uCJCCUGd1lX8C6nvDcca6PssG8I0iJtYZxlBkHf6XOq5E2:umCTGDlX8C6gMDNE2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893841, "uuid": "b6cda708-5c6e-4226-8f07-2822a8338ad0", "value": 8257720, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893841, "uuid": "74c5c0d1-9f5e-42f5-9e74-68a6a7dbe453", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9956b079-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893907, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893907, "uuid": "b828f6d1-e2d6-4d07-8cdb-b3350a556c1e", "comment": "Malware payload", "value": "641e697db03c0bc826304b7973410610", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893907, "uuid": "a1f11500-2cec-4449-8a98-3deb0c14f12e", "comment": "Malware payload", "value": "d8592c39ae84577d4b4ca28ee21e813e2bcebb80b0fa93623db0e4ef9dd685ea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893907, "uuid": "b88a2242-580a-463b-8470-e3be6b91cc40", "value": "T1B78618C1E891D28AC63D6D72EFE5EFD8E2673E315C885A4AC9C4F33E5CB214484B59", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893907, "uuid": "a55de5a0-2293-4c1f-bc9e-8862ca1e5c99", "value": "49152:9AUMdZ8f9xIBXHdDNGdQXKBEtyaVpWFa9KssG8I0mPw+wXeCYTIvMSrP361vp5uF:9AUMdZ8fvAtD7e19MnRwjEC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893907, "uuid": "4db0522a-af01-4641-8dbb-5cc69b2bc994", "value": 7864504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893907, "uuid": "1a1bf7e2-95da-4bd3-a4ce-55835e5aae14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a82ef3d-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893909, "uuid": "fb2e9eab-775c-4828-991c-bf832e927f0a", "comment": "Malware payload", "value": "21e9fcb05b138b271a4b7fb67c88aba8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893909, "uuid": "118dc96c-5cf4-462c-b445-5950227fa942", "comment": "Malware payload", "value": "5c2839aae4f54664c44f31b5f95f16f2ab5195d538f092d45614eb7e58713ceb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893909, "uuid": "2fed7fe7-c957-4396-8577-37aecfdff314", "value": "T19B565C0DFE248F71C65403B649F812981370AD02AFC747166239F73CFDB6AD4AE466", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893909, "uuid": "4f16c764-6202-4203-8bc6-c15ed6a41835", "value": "49152:namUgavBLbG1VG0UFFcUJTj3+dIfudJuV0l9cUtDwS5E9:FUgavo1VG0UFFcEENwoE9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893909, "uuid": "5afb833b-b6c4-4057-b69b-f26386f4f4b4", "value": 5898424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893909, "uuid": "a4770c69-f073-41b8-b873-d62ddda7ca8b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ad5f487-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "786b4f5e-1bf8-4dc7-85d3-c4b6676a0261", "comment": "Malware payload", "value": "9277e7570111bc3ce1bac5fd3caf8a86", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "50736b9a-b2d5-4b87-abba-7ad9f1730d75", "comment": "Malware payload", "value": "6c9c5d0cffa91005e5f2c5024ecff9477c1530dca221808e842bfc5e8582df27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "b5e487cc-347b-4ab4-bbb0-fd4b87959414", "value": "T1F2562800FECB14F6E9031D3109ABA22F63316D058F24DBE7EA547F29FA776A119321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "4e72f579-243e-4d69-a6ef-ca9f7579ff56", "value": "49152:I+hD46bmUm0t6or4ZtAQF039TywfuNyMlGa4LXg6gW4bEGjR/tF6zM5Eq:xl4YmQLruF44dga4LxCXzEq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893910, "uuid": "8ac0f315-226b-4997-9629-3dc8f640725e", "value": 5927096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "aaf97527-f60a-43f6-9382-b169e6f1bfcc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9afc768b-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "a0c06459-9ba0-4000-ba58-ab9972406ee6", "comment": "Malware payload", "value": "3f87c1e54e8d3817b00b1d6f0dea4365", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "9b270a79-7f14-45d4-b94a-3f60cd899e82", "comment": "Malware payload", "value": "a896a8eb7bf6339d46085b161eef72a7c1304f7dcf522de957843e95c6e36f24", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "19c251bd-df51-4be0-a5f6-98eb41a84d47", "value": "T11D563940FECB54F6E9030D3105ABA26F63325D058F25DBE7EA447F2AFA776A119321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "24992e89-e0fa-4060-a2b2-697631cdd23c", "value": "49152:gVMjQXuNVBS703P8yfdgJ1STG8GFrQlYhWF6E3jRo85E0q:+MQe3E03dmCGL10lE0q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893910, "uuid": "2e357f60-0e16-4eda-88c2-624f4cea8ca6", "value": 5927096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "7ca54739-7e34-486e-88f9-07eddb91cbd3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b1ac000-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "0790c42e-7aa1-4284-867c-9f2beb244f9f", "comment": "Malware payload", "value": "2bfcb23455418494f7fef2df617fbbe1", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "654bce73-5325-4c61-82db-5d7b050ece1a", "comment": "Malware payload", "value": "203e34c51743ea1a6cb6d6c85b39c36a560b20bd2feb7c07af708a404eeb687f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "34b176da-6d14-4622-b868-c89dbc62a40b", "value": "T149562987B8924942C4E43677BDBE81C433636EBA9B8752566D04FE383EBE1D90E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "89b30392-6b09-48d6-90ac-580b4fb1cbf3", "value": "49152:l68E/TD9dBey1UqWu+IwNu4bk6B+ibFv5r4n5Ed:l68wToy1UqBKtJF8Ed", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893910, "uuid": "f1b1f7b5-7f82-409d-926a-d73a79d57d30", "value": 6029496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "cc01057d-afe4-4c36-916e-72b6c29e0df9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b271a0d-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "a6df165a-7f6f-481c-b9eb-8f6ed5e626c2", "comment": "Malware payload", "value": "261072ef6359e53f7146bfc78ddafd60", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "22f7f1c2-d6c8-4db7-a5b6-b9570d33fe76", "comment": "Malware payload", "value": "a20ba047d54c20114ebb73d5dd5ac99adcfd4141a4cbafc88645564793724e74", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "8d10d516-facf-410c-9a5b-84c3043d8669", "value": "T15A567C81FB08A126D94A0E324CA30F74B3506D86C2E4C96F5709F76F95B1AF65A4FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "2a0962a6-5429-48a3-8774-2bff1fa77977", "value": "98304:yHPZUImClptgIL2i/KTOu8FHvPid60hTNOKRMBPLAY8RvjEJ:xL42isttdqh4R4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893910, "uuid": "17bf33b3-baf2-4dd9-a7d1-09c043d51f3d", "value": 6029496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "b6da2a58-4500-4a97-9e79-64ede8267e1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b2f7835-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893910, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "59b46407-eabe-43cb-a43f-6ec70c48ca10", "comment": "Malware payload", "value": "cb054940d8488e95f87749dc0337cd19", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "9ec84e83-7ce4-48d4-a15d-7d34202f0d2f", "comment": "Malware payload", "value": "60f732bfb24b53cffb5427e6312467bd6a63c494760b1fec059b98236bb47a3c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "49243de1-4809-4a31-a954-69f3898c0fcf", "value": "T181762812FECB14F6E943193104ABA27F63316D058F24DBE3EA447F29F977A9519322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "3b60900c-b310-4446-bd2f-cf98ede6d16f", "value": "49152:JUj3NSvU0F/FUQoU3EqPymbWCtrFZfpn0C0UgqaJG/CE1xXswkAhtPpmfssG8I0r:GjNU3eCBpbTbnE4OGqE1jP5Z/EmC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893910, "uuid": "6c20ab7f-a398-4025-925c-9a69fa294c15", "value": 7282872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893910, "uuid": "a48822bc-ec40-4d40-be3f-dce00fc2f2a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b3eb425-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "ea457d6f-2ab7-4f2c-bfda-5b90f6895cda", "comment": "Malware payload", "value": "dc7e2f28a6e0008eceda4cd2e1057d21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "57bd7340-f79a-4dc6-8b92-be059210c34e", "comment": "Malware payload", "value": "d73b5b88106135951e70cdf60c5fb190d9d834fd528b072e55a3d350b7809b4a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "fd5674f8-5764-4cb1-bd75-f2e5f25d16c9", "value": "T1B2566C09FD249F71C7A403B649F802981370AD02AFC74712A635F73CFDB66D4AE466", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "a8e75054-bf1e-4077-b319-afe625912527", "value": "49152:TygK9+HXztoS4l3OEL66+nW8nac0KdIf2dJuV0l9cfhEIikq5EW:mP9cXzt63OEL66+nWJXhEhkgEW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893911, "uuid": "73e014d9-1685-47fe-bda1-4cd8373f7df2", "value": 5898424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "2d61307e-a943-439c-84ca-95b70477b1c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b407af9-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "f85fdefd-896d-4a3b-9b88-74433a3fa2f1", "comment": "Malware payload", "value": "0684f7658bb03af5b8f5989d5e6fc816", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "60ba7768-c144-4602-a474-3ba3d597e8b9", "comment": "Malware payload", "value": "31db03671d36ae234eed8a3e2b836b587ae5a1a0fd120778e2583db9a38bae2f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "717a42ff-f28e-4aab-86fc-8937a3bc9840", "value": "T16D565B43FCA555E9C1AA91318A629253BB717C482F3163D32FA0F3386F72BD06AB57", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "97c3b9fb-1813-4728-9cf2-a6900860f5c9", "value": "49152:dg3fb1SY3v5a7uWtxrq5p0KFKNZmw3otAjVNKUTZHeOFoVnmvb/EQomYyFN3XM8o:dchhB8I5C1jjTZH7omb/H9N9TtkEEH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893911, "uuid": "d6aec440-e788-4448-8d46-0c3d915cc9aa", "value": 6136100, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "3110d498-7135-4030-af54-52a59840d8e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b56174d-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "826bde01-fea4-4951-9076-29564fc5357a", "comment": "Malware payload", "value": "7ceccb978b0e6f44f739d021becf81c8", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "61ffa26d-0260-4871-ab42-64b3a6f45a06", "comment": "Malware payload", "value": "8132030dc14004f2b63f29842a97fc7c8d73f7b7f495a87722fc2e3b2d0a7478", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "7fc53f32-c231-42c0-960b-bddfdc322cf0", "value": "T174666B45BC2D7462D6C975752F6202A43339BC049F82C7132A28BB7DE9F27588F637", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "9d5243ba-6bc2-48b7-a33b-3b6c10bfca8f", "value": "49152:5CQbo1RAr+MFdYuvn52KNPoQjyZ+NYrwA2NuzxxKssG8I0MlivTab6ix5EM:5CQU0r+MFtvn52KNPn2+N/wEM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893911, "uuid": "e0941792-8afd-4dd8-bc74-da255279c937", "value": 7012536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "5d764ef5-7550-4898-b0d2-dfae84584499", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b622235-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "fafd4e6a-4ce9-47b9-9c9f-aa3c462e045b", "comment": "Malware payload", "value": "eb14a0a2f90c2376fbe1ef70b659e46e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "15291a0a-4f95-4549-b9af-6e6a279f10d0", "comment": "Malware payload", "value": "0d133a5a234367b850f889f18be508da82e5c9e8732f27c91f8cfe5817c2e96a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "662cb451-5735-4ce4-9662-1e0a8f769b92", "value": "T1A95618C1E991D24AC63D6D31EFD6EFD8E26B3E315C885A4AC9C8F33E1DB214580B55", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "37005dfe-556d-432c-9977-b8c0f0860f11", "value": "49152:Mem1oH4T8Ote0PivDfieyZgDfByPF+8jPhnGP8BHxwt5E4:Mem1oH4TRtjyDKiE7RwjE4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893911, "uuid": "326efadf-1ae3-45ec-8402-f990e1c4bd73", "value": 6422712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "306d6d04-6a1f-4180-8fd5-f12687891f4d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b62b3f1-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "298fe2ea-4dc8-4db3-97d1-e3815e2dfc67", "comment": "Malware payload", "value": "ca7fb0efdc421ac900a246e2534aa53d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "e6de63ae-de0f-41b3-88cc-6679e3e20292", "comment": "Malware payload", "value": "6189b23990be9c4f78f588bd5a660c6fa7f2e1abedc9d5fa47ac19356562a655", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "a1447419-1782-4920-a55f-1518b3aacfa7", "value": "T1318617177B19EB1ECB1821300CB2CA94276A2C9942D69517B781F319F9F30BC996ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "0d0510ea-e234-4ced-b2b6-d4cc123f618f", "value": "49152:+FkhZYJyS+5Uvxhp5a8AA1LjsPj7er3jprJHK9qRTj6Xf/OassG8I0eT8ueQS8Jd:T8LVdRT26T8kKBLNXi2HbRvjEL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893911, "uuid": "a13a3c9f-084a-466f-9224-8cf5583245f4", "value": 8323287, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "1dfac7fc-d04b-4003-8863-2e51295124f1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b7616bf-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "62f11a44-5fe5-49c8-8441-a18d3d105e1d", "comment": "Malware payload", "value": "a3b87b72209825304ff6bbe2bb1e7c0c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "23b0f09e-ab37-4248-b7f0-bfc4542d8f29", "comment": "Malware payload", "value": "3ac6211c58344475351d3cd6081f054c9dae436be8da65870c090aad7bc48d6d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "94cd4ebe-96ff-4215-b1d1-fbe0dda50f9d", "value": "T1D7661862BF58DE4FD29632314EA6C23473D53D1081B020379656F71D2EBA3A09D6BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "1dd819fc-f1b5-48a9-a534-1577b7df423f", "value": "24576:CW9vpF/C1SMPzeTjRBztvBebB42qqBRzoIhmz3Nx77OqOWfNo4l7YFZCzt2jgiph:Vdttt5gZoIhCn7DNx1YFZ2C55Hxvt5E4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893911, "uuid": "4c71310a-bc87-41b1-8307-99e064b65561", "value": 6750392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "e3cf83ca-f513-4bcd-b930-2606b5c6e0f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b83cd5e-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "a8bd8428-3a64-4e40-bb01-b2d816171141", "comment": "Malware payload", "value": "514d7cfc5034542c77afc25c7667e01c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "e47a1c04-8d90-43bf-9b26-422a8df0c9b1", "comment": "Malware payload", "value": "29b37e818a304fc002f404d2a230bb449f77d251a181f3c1933d52f59e06eaba", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "36f7faef-0264-4313-8dec-4fafdbd6ca7e", "value": "T169765C09FD649FA1C6A402B689B412582370AC036FCB4717A235F73CFCB66D4EF866", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "88671094-b5aa-4903-8e96-382889698cda", "value": "49152:LFTwHMOyvGHkAqiHewHkfKEyp3oyP6FXJ1wPssG8I0kdIf3uxAu30l9cYqEPUXyt:MMOyvWqiHewHkfKEypV3UEPjVKEv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893911, "uuid": "485ce5a3-2f97-44e4-8aaa-754d18b0ab30", "value": 7143608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "a1fc3522-6929-4543-9fe7-af8109f5cc0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b8c94fa-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "bc3b46c5-f9b8-4001-894e-51fec41b3e46", "comment": "Malware payload", "value": "7e3f5f67e0c517e90d3295f8658785f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "f1e0fb3e-5018-4f38-937c-deee1bc7bd6c", "comment": "Malware payload", "value": "cde76c433dedc1da0f60f03b4b403601433985ee2387a06918f24f267a629388", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "8d9d70f3-3223-487b-9c2c-26a5ae44ad63", "value": "T13C660955BDC32F66C19C137445ED626662603E454B96433323A8EBFC3A7773CAF4A8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "da40d289-2c53-42d2-9283-7be0acb36e5f", "value": "24576:I2BNKJ/+FY+fkW0XIrMuL7S4EtKIuZt7+tfo+6Cd0rAwi3O5lfqOW7bgi/YkZrzk:mJcY2xtL72tT6C6eQubguYkZfuikZ5Ey", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893911, "uuid": "6006491f-ce9d-40db-8883-9e77fd57bc26", "value": 6750392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "fdf3c942-0e23-4e5e-9377-d8e325f364f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b95ae9c-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776893911, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "e262cbf4-e7f1-40f0-ba31-3fecca87480b", "comment": "Malware payload", "value": "611d7ca66355dac6f2e181e260998657", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "930fd2b2-d49f-4f0b-8f68-c0b6edc4303d", "comment": "Malware payload", "value": "f8aff29743026250a219b82ea85388c13ed48c21d31124154ad847f75c03d9dd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "1dbbf705-58d3-4216-a703-ee58827115e0", "value": "T1F666E909ADC42BF6C06C5B7494EACA5622706D144EF14A2626A4FFEDFC762347F478", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "dc13c26c-85d1-4819-8175-289c015a0202", "value": "49152:IOPlHWSNW6faUEWXPW+5OWo/KPEKpP973Ri425Ec:9nXPWQPpdlsEc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776893911, "uuid": "8ec52dc5-d207-49dc-8c97-f320e48b7312", "value": 6815959, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893911, "uuid": "7c12f3f2-58a9-469a-bc70-983cefbcc5eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e240daea-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "7363a47c-c39d-48bf-b18e-4c0eff2ac6d9", "comment": "Malware payload", "value": "2313ab5d9b6d5dcd649e9fe125dd6a02", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "9ce534d0-9ff6-47e0-bb7c-cac000f2716a", "comment": "Malware payload", "value": "9a880b4e8ff72c6075869deedef0798af62f47d69ac4266d08b85543ed8d3c8a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "9272dbb2-3717-4c01-b017-033ebbd38a2c", "value": "T10BB423CE5A286CAC5BE89E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "b8a9d982-6ea6-4dbb-a101-8d049974ae89", "value": "12288:tGRl4nbDDGIabs/7iiEVwYg2l3/2NHty+wK8H:xTabs/7iiWw0KwxH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895748, "uuid": "e2302a93-5dc3-49f2-a76f-db3e100ac4a5", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "482c00c1-2d8e-4c07-8929-9dd92f29cf4a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e25b05a7-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "01ad4470-3fc3-40d8-8c7f-b7739e86411b", "comment": "Malware payload", "value": "f19bd0812dfe8a4a122dad9f2ae1d55f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "272560d1-85f8-4b62-8a03-a413f8e7b572", "comment": "Malware payload", "value": "68de04fd5be5cacf5dd45e6476bed5bc00b27208cbf9b13ccade4697783f24bc", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "e59ed14b-f903-4ac4-bb75-f0cd3d1fdbfc", "value": "T16CC42304340641D5835A2B1EAEC4E7E0BEB5A0DBFA1CF940AADD7ED06DE92A173C15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "97bd0ce2-f247-46c5-9007-a34197d798dc", "value": "12288:j6wlOMWROC/FTeHo22Qm7NzofOr68mAeA924EwCy:b4MQOC/gHozN7NzomW8+A9V", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895748, "uuid": "5c609b96-c734-42ac-a619-b9bbc6b9a466", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "5297ad99-3c72-4c91-bd94-5b1512484996", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e28947dd-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "c5c38a67-84e4-490f-b6d2-992efbbb7550", "comment": "Malware payload", "value": "e36f371203b890f617b2625d9d730290", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "edcf52e4-11ff-401f-89cc-5797ae8a2bfa", "comment": "Malware payload", "value": "af14cf8f484eb74d7f39d6d687fde425dc84582a4bd5bfa70f47259508751299", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "0c07b47a-747b-4cb0-872f-ef96f736880c", "value": "T128C42304340741D5835A2B1EAEC4A7E0BEB560DBFA1CF940AADD7ED06DE92A173C19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "7dc9df00-188a-4c63-adb3-d92482dfc520", "value": "12288:D6wlOMWROC/FTeHo22Qm7NzofOr68m/eA924EwCZ:74MQOC/gHozN7NzomW8VA9C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895748, "uuid": "2813867f-9926-469c-a293-40ae6b107132", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "ab88c765-3d7e-4888-8ac7-6f96dbb50cf1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e29d96ed-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "3bfd83fb-1444-4006-bcc3-a4fd35dc81fa", "comment": "Malware payload", "value": "efa6b94fce8dbc7eb9b6c40bad77db1f", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "215d4994-60b8-4d55-8d6d-fa59146ed675", "comment": "Malware payload", "value": "4310618a78d656bf64568143b05210e0c69d29f7aa19da20788c5dfa2377b73c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "5c3be8ee-36d9-48b9-8317-5db4732279bc", "value": "T16CC42304340641D5835A2B1EAEC4E7E0BEB5A0DBFA1CF940AADD7ED06DE92A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "e5832246-915b-4a31-bea2-521f228f6e42", "value": "12288:L6wlOMWROC/FTeHo22Qm7NzofOr68mWeA924EwC0:z4MQOC/gHozN7NzomW84A9b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895748, "uuid": "7777d288-1981-4689-969e-d33b2227bb39", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "639b4334-ade1-4873-ae7c-9a6751d12442", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2a24df7-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "02fa1867-6c0d-407b-8189-997f5e863ab4", "comment": "Malware payload", "value": "b38117ec86b19b353046ec71d3a8d5ed", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "20662610-81e0-44a9-92eb-fd11ab89e300", "comment": "Malware payload", "value": "8901aa8feff89383f7c84ad93fa3cc0a2f0e25fe701f943c19101308f4a366d7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "dfb81d40-6f37-4701-ac76-8fa9a4f80e04", "value": "T1CEB423CD64BED4A87B658DDA9FDCBFD30CFC003A6D7527F2A51C1A13A1C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "9241d403-cb64-42f8-9fbe-981cdf1aa2ba", "value": "12288:0B/e4pqNFTFbEXkBDoGbDDGIabs/7iiEVwYg2l3/2Ny4:0Bm4pgTjoGTabs/7iiWw0D4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895748, "uuid": "6e061cbd-31ff-4379-94be-2d371661db55", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "032ab57a-fc20-4ca8-a13c-a80cd6a81a3d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2a413d2-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895748, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "36b120e1-7389-41b6-8d5b-a0bd8fd799d3", "comment": "Malware payload", "value": "6aba2a4769372024e52c4b478c82a86e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "52236de6-f0c0-4410-8b7e-ecf5a86b7883", "comment": "Malware payload", "value": "eca1b2f3591e7e04b6cc112b00b816a30c8d50e160a9cd09cfa202992f44a725", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "e6d26dcc-6341-42c8-b8e5-8c9666942774", "value": "T11AC42304340641D5835A2B1EAEC4A6E0FEB5A0DBFA1CF940AADD7ED06DE92A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "81cd1f08-62de-4788-bd0e-d2df0a86c399", "value": "12288:D6wlOMWROC/FTeHo22Qm7NzofOr68mDeA924EwCl:74MQOC/gHozN7NzomW8FA9C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895748, "uuid": "fcb5cd93-26a6-4d00-be04-a33db96614ea", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895748, "uuid": "1954af29-5508-45cd-b4a8-3b59de2f95e8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e31301d8-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "f60bc05b-0588-4ab3-b8b8-1521e3951865", "comment": "Malware payload", "value": "6813424dfb07bcdbe2fdbf5c19c54c64", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "8ae7e94d-6246-482f-9336-84c3d94da0aa", "comment": "Malware payload", "value": "639183212002edf258856a164686b2c451a6670aea6c86c0bb2d7a888edf0d92", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895749, "uuid": "f9145d05-cb1e-429b-9528-ef0b5ca46af6", "value": "T159C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE96A173C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895749, "uuid": "17df4e4d-3193-4ec6-9452-a6def65708f1", "value": "12288:T6wlOMWROC/FTeHo22Qm7NzofOr68mVeA924EwCj:L4MQOC/gHozN7NzomW8nA9Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895749, "uuid": "3aad3466-5aca-4759-bde7-fa58474b618b", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895749, "uuid": "0cf073dc-e4a5-4851-8174-4f58cfa75499", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e31c0d2c-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "1df28ae2-f7d1-46e8-acd9-7e2c2b871d6f", "comment": "Malware payload", "value": "8dcec659e063dd7926f53bccaa551c46", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "66e87706-b4ad-4986-9856-26ae6dded2ea", "comment": "Malware payload", "value": "e2ed97dcae3291b0293cf4bb8157d79dd667e287707795384a4b99722b31f8c5", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895749, "uuid": "07e16206-c859-4a24-8205-2a9d3024ae75", "value": "T16EB4230A85D01FFF899ECB9946D4A4672FF467952F93565BC0CD20700AEA203E6EFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895749, "uuid": "9051308a-3643-4588-b714-d7cf65bc91d6", "value": "12288:DvOi3UDYXndLQ/jJOjB89RitlR0XjuIkVp69d3iY829uhBTbY7vPpCkIz:DWiEGnlQ/jwyil0X7kWv3icYTb9b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895749, "uuid": "d8cce5ca-840b-4b9f-a9d5-845bf627470d", "value": 540419, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895749, "uuid": "cfba83b8-9b90-44b7-974a-161a0dbf94bf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e34fe9ff-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895749, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "3761775d-88ce-4fe4-a858-95198f6663fe", "comment": "Malware payload", "value": "5f168e61e4df023d2fb985aba15a93dc", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "9c93080e-be0f-448b-97c1-de4ad99529e8", "comment": "Malware payload", "value": "898b7e6337f7a5487133506bbdd502d1badd0ab09b40388c639f255f27036c4d", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895749, "uuid": "5e604a6f-81fd-4ff5-b3d9-71e6ede9ee84", "value": "T145C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A173C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895749, "uuid": "c41af380-4341-4ebc-8b8e-b99ce2502619", "value": "12288:/6wlOMWROC/FTeHo22Qm7NzofOr68mOeA924EwCA:H4MQOC/gHozN7NzomW88A97", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895749, "uuid": "c97fc8ed-f74c-4dbc-82a4-3e26113e155f", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895749, "uuid": "5abcb67a-5ae5-45d2-b346-c311183c6dba", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3635133-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895750, "uuid": "bf8f926c-5525-4b3f-a76e-38793ee7d49c", "comment": "Malware payload", "value": "bb56687c43897584db08e118d46d385a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895750, "uuid": "a3c42264-8163-4c12-a1d8-aeaeb9f9f5e6", "comment": "Malware payload", "value": "5639c9979efa9981b676d4b56d32a726f320dcdcf1eb489aab6a5c05ecc237e1", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895750, "uuid": "da10e5e9-e842-4374-ae1a-a04f5a53380b", "value": "T1C0C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895750, "uuid": "d49c63d9-225d-4c09-b0ff-ebd4aa52625c", "value": "12288:36wlOMWROC/FTeHo22Qm7NzofOr68mSeA924EwC8:P4MQOC/gHozN7NzomW8YA9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895750, "uuid": "9b60bac7-82de-407c-be98-d4a25c8fc678", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895750, "uuid": "5e9a5f96-f4e6-486b-845f-f579331af650", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e2348483-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776895750, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895750, "uuid": "44c4e17e-39b2-40a6-b255-85a4dac44921", "comment": "Malware payload", "value": "a12d0a01b303961949105a9caaa7d6aa", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895750, "uuid": "a2b9be12-5969-4af4-ad2f-a92c4ca6d276", "comment": "Malware payload", "value": "151c8f5e4335cb9331d784ba5b539523f13427f497bd94f6931a2305207220f7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895750, "uuid": "290619f7-bf12-46f6-8308-11cbdb899575", "value": "T133B423CE5A286CAC5BE89E834F5DBFDA2CF8413F861411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895750, "uuid": "03a08afc-f0c8-4d88-acb9-1a0c1955ddb0", "value": "12288:xGRl4nbDDGIabs/7iiEVwYg2l3/2NHzy+wK81:9Tabs/7iiWw0K+x1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776895750, "uuid": "5f87a156-728d-453c-9e6c-08d84fa44a11", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895750, "uuid": "a39c8e3c-6778-4ee5-82fd-9d19286133b7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3c2de70-3e99-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1776896609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776896609, "uuid": "8b5b91d2-a4f6-4ccd-8ef7-d03804d310b8", "comment": "Malware payload", "value": "af5ac1a090a2a697c9bad0e2664d4cc0", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776896609, "uuid": "1d4111a3-d1e5-48e4-a250-00326a4118b8", "comment": "Malware payload", "value": "d047a0ee8b0d3bb82092fdd0b975e30a7884a5517fc4546a4a3ee4362e744f0e", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776896609, "uuid": "d1524d13-7bf7-4bef-a749-87cfc23a8af2", "value": "T1E766F117BF96CC39D95B40B373C38963502A16D9A80AF03F46A00D875A71D4AE35AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776896609, "uuid": "3fc1f5a3-2de1-4420-92db-1529642e63a2", "value": "98304:gqpVxRQ5OhSPoyC6G2mKCQKyiAXdqrC42gOCD8K5K7jDRvfdM8ImhqEk+O81e6w3:p2ToyC6DtCd9Z8CDvYXJVPdq8y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776896609, "uuid": "48ecbf3a-4803-4b8a-9eaf-e00e6701f07b", "value": 6885579, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1776896609, "uuid": "90b90f4c-50b6-4f7b-b6d9-d600f621c1cf", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1776901821, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1776901821, "uuid": "33315ce8-9217-4dcf-9db6-b31e36747acd", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1776901821, "uuid": "84b01c49-a388-4cd0-831b-0366eb2927bf", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1776901821, "uuid": "6251e1b7-f40c-46ab-95bf-0c5d99d30a4d", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1776901821, "uuid": "78011b6a-85de-4b5a-82dd-361a52f1fd6d", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1776901821, "uuid": "1d9f369e-9e1c-41b1-81c0-6373e3840adc", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816016, "uuid": "3e634506-3dde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-wind1.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816094, "uuid": "6d2aa568-3dde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.243.8.193:40721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816314, "uuid": "f05763c0-3dde-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://soft-cha-ir2.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816551, "uuid": "7d55c345-3ddf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.100.39:47840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816613, "uuid": "a2187746-3ddf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigwall3.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816679, "uuid": "c9c10e91-3ddf-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.183.253:34642/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776816968, "uuid": "75aee5fc-3de0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-vi-ew4.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776817269, "uuid": "297f2970-3de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldwa-ter5.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776817281, "uuid": "308d0e0f-3de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.201.157.212:55247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776817398, "uuid": "761da6be-3de1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.252.212:45761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776817688, "uuid": "22edc44a-3de2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://redbook6.aperitif-form.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776818169, "uuid": "41fcc20b-3de3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-app-l1.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776818350, "uuid": "adc122df-3de3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-bun2.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776818589, "uuid": "3bf88136-3de4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hottea3.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776818953, "uuid": "14c7a724-3de5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-m-ilk4.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776819249, "uuid": "c57d2cd9-3de5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-stone5.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776819315, "uuid": "ed0ebbae-3de5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.109.227.86:59638/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776819737, "uuid": "e876faba-3de6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.243.8.193:40721/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776819846, "uuid": "298e3f78-3de7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://old-ca-se6.jemannik5helma.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820028, "uuid": "96109e51-3de7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-sk-y1.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820268, "uuid": "24f50c8a-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-ni-ght2.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820327, "uuid": "47c0747c-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.221.27.21:38224/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820400, "uuid": "7364e67e-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.197.131:53404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820459, "uuid": "96d22998-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.134.246.21:57804/Mozi.7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "be1912e4-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "be191e02-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "be1b4849-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820525, "uuid": "be1ceae8-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820576, "uuid": "dc373ffe-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820576, "uuid": "dc37719c-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820628, "uuid": "fb564daf-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-ocean3.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820629, "uuid": "fc11c1cd-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820629, "uuid": "fc11e79b-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820629, "uuid": "fc184ee3-3de8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820637, "uuid": "008804b7-3de9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jew.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820637, "uuid": "011087bf-3de9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.252.212:45761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820639, "uuid": "01d038cc-3de9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.241.223.215:51496/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820758, "uuid": "48bc6406-3de9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.80.140.44:52678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820869, "uuid": "8b3bcba6-3de9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldfi-sh4.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776820939, "uuid": "b4b308a9-3de9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.209.76.246:54822/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776821287, "uuid": "8440d6ea-3dea-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whitecl-oud5.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776821532, "uuid": "16833b46-3deb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.61.124:44034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776821589, "uuid": "38248b32-3deb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://silver-ra-in6.basis-embankment.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776821949, "uuid": "0ef65e16-3dec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-f-loor1.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776822023, "uuid": "3ad01764-3dec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.250.216:49060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776822081, "uuid": "5d396da7-3dec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.30.133:33112/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776822308, "uuid": "e489e033-3dec-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-wa-lk2.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776822555, "uuid": "7816e698-3ded-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.80.140.44:52678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776822611, "uuid": "992b8c8b-3ded-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://next-door3.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776822849, "uuid": "275f00c4-3dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fullr-oom4.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776823038, "uuid": "9811c183-3dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.75.24:40031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776823039, "uuid": "985a0af1-3dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.7.209:39779/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776823209, "uuid": "fdd3d217-3dee-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://backy-ard5.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776823627, "uuid": "f6dd8079-3def-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://side-vi-ew6.cr2pskiing.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776823629, "uuid": "f7f9401b-3def-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.250.216:49060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776823822, "uuid": "6b00e471-3df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.30.133:33112/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776823822, "uuid": "6b73a6de-3df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.205:42246/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776823933, "uuid": "ad3a7e0e-3df0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-n-ews1.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776824115, "uuid": "1a081a36-3df1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.205:42246/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776824229, "uuid": "5d995089-3df1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-ti-me2.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776824233, "uuid": "6056181a-3df1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.253.124:40247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776824357, "uuid": "aa2dd56d-3df1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.65.75.24:40031/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776824528, "uuid": "0fb6ae45-3df2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://real-fact3.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776824782, "uuid": "a74aa76f-3df2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.78.146:55467/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776824837, "uuid": "c84aa8e8-3df2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.129.141:48483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776824894, "uuid": "ea38615d-3df2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nice-sh-ot4.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825127, "uuid": "754f980b-3df3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.91.44:53403/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825189, "uuid": "9a3aae09-3df3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://justta-lk5.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825500, "uuid": "5315c59c-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825500, "uuid": "53176cb2-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825500, "uuid": "531c5b72-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825500, "uuid": "5325b4da-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825500, "uuid": "53263018-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/debug.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825500, "uuid": "53293072-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825500, "uuid": "532a8dc4-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825551, "uuid": "71eb5209-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easy-ta-sk6.eighth-swollen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "756b56dc-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "756b7f4e-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "756b8610-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825557, "uuid": "75702133-3df4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.132.117/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825911, "uuid": "48732ecc-3df5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.140.222:44434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776825914, "uuid": "4a2e305e-3df5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-pi-e1.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826208, "uuid": "f929f5c9-3df5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.69.26:58120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826210, "uuid": "fa5b5427-3df5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-bun2.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826397, "uuid": "6a0903e2-3df6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.82.94:38633/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826511, "uuid": "adbd008e-3df6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-s-oup3.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826522, "uuid": "b4abe44b-3df6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.29.228:40767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826695, "uuid": "1ba14062-3df7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.46:36157/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826807, "uuid": "5eae7258-3df7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xs.bhaaratkeeshakti.vip/fwefwe324234234rgeffwehtrwyrhtrhtqwfqwd31443wefefwwfer3232fewwefwefwefqgrqwtherergqefwefqweqfwqf32fefwsda/uploads/EFewefwewFEW342234423234feWEEFWWefewefweffewwefEWF.php?file=333.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-empty", "colour": "#752700", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826874, "uuid": "862a1c9f-3df7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gitlab.com/v1ffeyn/roxxy/-/raw/main/API.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826926, "uuid": "a5560b78-3df7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.91.44:53403/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776826928, "uuid": "a64a0972-3df7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-tea4.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827229, "uuid": "5a1c5f81-3df8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coolmi-lk5.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827407, "uuid": "c3f7656b-3df8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/deermoment/Silentum-Spoofer/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827407, "uuid": "c43881c7-3df8-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/deermoment/Silentum-Spoofer/raw/refs/heads/main/Silentum_Spoofer.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827587, "uuid": "2f442c48-3df9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://purewa-ter6.import8ravitate.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827827, "uuid": "be2fac19-3df9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.23.80.137:48453/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827888, "uuid": "e2908e95-3df9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://black-h-at1.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827890, "uuid": "e3f72a5e-3df9-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.69.26:58120/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776827957, "uuid": "0b8e9883-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.226.20:52483/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828021, "uuid": "31b618ee-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.58.197.152:39514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828021, "uuid": "31d479da-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.46:36157/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828021, "uuid": "3242c7c6-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.217.13:40757/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828080, "uuid": "55425123-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.29.228:40767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828080, "uuid": "55428ec4-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.162.76:57129/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828127, "uuid": "70fa87c1-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.12.229:50276/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828251, "uuid": "bb456738-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-shir-t2.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828553, "uuid": "6f076da3-3dfb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-be-lt3.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828726, "uuid": "d676034e-3dfb-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.49.31.147:52348/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828848, "uuid": "1edb06cd-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-co-at4.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828858, "uuid": "24a9aad5-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/massload", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828858, "uuid": "24fff38b-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.130.73:44083/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776828966, "uuid": "6546589f-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/8.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829027, "uuid": "898f049c-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:34032/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829086, "uuid": "ac81a757-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/bot_x64.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829098, "uuid": "b3e6d220-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.99.246:51379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829208, "uuid": "f5bc48cd-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://newst-yle5.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829385, "uuid": "5ee07b03-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.134/lll", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829385, "uuid": "5ef97610-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://94.26.106.134///arm5", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829400, "uuid": "682ee960-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.135.170.3:33308/Mozi.m", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829402, "uuid": "694200e1-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.33.219:60660/Mozi.a", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829444, "uuid": "825e2346-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/giga.sh", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829444, "uuid": "826fdcab-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/arm6", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829461, "uuid": "8c547cc7-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.19.83:33324/Mozi.m", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829572, "uuid": "ceaee9a9-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-lo-ok6.arena-plug.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829750, "uuid": "38bb84a3-3dfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.162.76:57129/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829750, "uuid": "38c17032-3dfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.128.113:52717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829821, "uuid": "62f2cf95-3dfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.163.158.31:59140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776829822, "uuid": "63bbc9e4-3dfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.177.57:54617/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776830059, "uuid": "f0cd5657-3dfe-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.214.149.164:49911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776830113, "uuid": "10e7c7ac-3dff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunny-d-ay1.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776830286, "uuid": "78004e3c-3dff-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rainy-ni-ght2.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776830525, "uuid": "06c27da3-3e00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.97.113.40:34032/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776830648, "uuid": "4fba685c-3e00-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clear-sky3.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776830953, "uuid": "05625f38-3e01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-sn-ow4.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776831126, "uuid": "6cae0165-3e01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.140.222:44434/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776831127, "uuid": "6d16d352-3e01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://76.49.31.147:52348/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776831308, "uuid": "d95ec6ad-3e01-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmf-ire5.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776831438, "uuid": "2693faca-3e02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.197.215:56830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776831615, "uuid": "903c6af6-3e02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.174.189:48481/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776831730, "uuid": "d4e0a1a1-3e02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-mo-on6.sin8lebreasted.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776831797, "uuid": "fcaf59d4-3e02-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.135.177.57:54617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776831970, "uuid": "63bf6248-3e03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-lo-ad1.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776831983, "uuid": "6b8192bb-3e03-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.151.206:60681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832328, "uuid": "393c522d-3e04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lightp-ack2.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832639, "uuid": "f27e46e2-3e04-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.197.215:56830/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832690, "uuid": "1111c6d8-3e05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://full-b-ox3.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832691, "uuid": "1155ae7c-3e05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/StudentReflect/roblox-da-hood-script/releases/download/new/RobloxDaHood-1.5.3-win64.rar", "Tag": [ { "name": "pw-4477", "colour": "#96b20a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832693, "uuid": "12b1756f-3e05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Daimyoclorespect/roblox-bubblegum-simulator-script/releases/download/new/RobloxBGS-1.2.0-win64.rar", "Tag": [ { "name": "pw-5585", "colour": "#f3c53a", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776832994, "uuid": "c5fb57b8-3e05-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://empty-s-pac4.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833529, "uuid": "04f39e78-3e07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.99.48:60715/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833593, "uuid": "2b72730e-3e07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickmo-ve5.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833773, "uuid": "9651bd23-3e07-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-po-int6.buckishing-out.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776833953, "uuid": "019ed633-3e08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blue-box1.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834024, "uuid": "2c3d75e7-3e08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.46.218:42756/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834128, "uuid": "69d8cdfc-3e08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.136.230:45469/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834314, "uuid": "d91b5ec6-3e08-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gre-enleaf2.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834614, "uuid": "8ba66da4-3e09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastrun3.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834666, "uuid": "aafc25fd-3e09-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/wallet.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776834969, "uuid": "5f8e6c99-3e0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-lamp4.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776835037, "uuid": "87a8acd8-3e0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.163.91.246:60240/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776835106, "uuid": "b1391d05-3e0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.95.168:37586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776835275, "uuid": "15ad5596-3e0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clearview5.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776835634, "uuid": "eb91ede0-3e0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hight-ree6.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776835762, "uuid": "37c3c197-3e0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.115.148.145:34631/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776835990, "uuid": "bfba67a3-3e0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-book1.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776835995, "uuid": "c314111d-3e0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.201.140.48:57513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776836290, "uuid": "72c2d74a-3e0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://softwind2.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776836652, "uuid": "4aaa9c50-3e0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://red-mark3.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776836661, "uuid": "4fb58456-3e0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.78.95.168:37586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776836906, "uuid": "e2283c37-3e0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.1.39:40493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776836955, "uuid": "ff4ea324-3e0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldwa-ter4.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776837309, "uuid": "d203d53b-3e0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bigwall5.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776837370, "uuid": "f655f78d-3e0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.232.53.145:56344/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776837428, "uuid": "18b3e8e6-3e10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.221.23:44606/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776837674, "uuid": "ab8fc006-3e10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-page6.ra4xilen.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838028, "uuid": "7e6220b2-3e11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.105.183:38376/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838090, "uuid": "a380112a-3e11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tastyapple1.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838149, "uuid": "c6f1d12b-3e11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.65.215.0:55567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838328, "uuid": "3187a564-3e12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-pear2.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838572, "uuid": "c2da02f0-3e12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshmilk3.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838929, "uuid": "978be354-3e13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.11.132:50337/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776838992, "uuid": "bd11fdd3-3e13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-tea4.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776839178, "uuid": "2bf4d666-3e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.234.46:44742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776839292, "uuid": "7030e020-3e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmbr-ead5.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776839409, "uuid": "b5a1fd3e-3e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.201.140.48:57513/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776839527, "uuid": "fbe51060-3e14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.174.105.183:38376/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776839589, "uuid": "213debdd-3e15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coolstone6.sylom2er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776839826, "uuid": "ae903fa8-3e15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.11.132:50337/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776839953, "uuid": "fa2a7d9e-3e15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-sky1.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776840248, "uuid": "a9e5dd0b-3e16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://darknight2.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776840308, "uuid": "cdb1dede-3e16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.157.23.2:51662/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776840367, "uuid": "f0f19dbd-3e16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://206.245.165.5/XClient...exe", "Tag": [ { "name": "206-245-165-5", "colour": "#e4e316", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776840818, "uuid": "fd99ecf0-3e17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.238.59:52497/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776840848, "uuid": "0f4fbafd-3e18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-ocean3.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841033, "uuid": "7e09fd1a-3e18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gold-fish4.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841043, "uuid": "83a0926d-3e18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.42.14:41959/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841105, "uuid": "a8bf1d96-3e18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.239.210.205:46801/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841270, "uuid": "0ae9ac4c-3e19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://whitecl-oud5.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841343, "uuid": "363e2acf-3e19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.100.240:36487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841343, "uuid": "36a03e92-3e19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.161.3:58696/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841566, "uuid": "bbb6e178-3e19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://silverrain6.to7virel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841577, "uuid": "c1f043aa-3e19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.122.34:50922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841871, "uuid": "70f96f67-3e1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.13:8080/USOShared.exe", "Tag": [ { "name": "83-142-209-13-8080", "colour": "#67624f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841871, "uuid": "715d811e-3e1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.13:8080/sliver-client_linux-amd64", "Tag": [ { "name": "83-142-209-13-8080", "colour": "#67624f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841874, "uuid": "72e2f6e7-3e1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.48.123.149:58125/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841928, "uuid": "92f6437a-3e1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-floor1.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776841929, "uuid": "93e7fe2a-3e1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.60.77.123:52740/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842170, "uuid": "2350e248-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.215.123:38651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842229, "uuid": "46e6adce-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-wa-lk2.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842286, "uuid": "684d5867-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://indexsearchfindresult.com/check.php", "Tag": [ { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842293, "uuid": "6ce0d8a9-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://indexsearchfindresult.com/ae228216-ad43-473f-94dd-b2c8616a2123/ck-dce6bcbb1a728ea8d871de6d169a2057.cloudflare", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "rundll32", "colour": "#2c0e13", "exportable": true, "hide_tag": false }, { "name": "unc-path", "colour": "#0a50db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842297, "uuid": "6f119f9a-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vasijl-cloud.b-cdn.net/Peton.zip", "Tag": [ { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842353, "uuid": "90521684-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://acbcr.ro/wp-content/update.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842596, "uuid": "214c4ae6-3e1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nextdoor3.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776842669, "uuid": "4cb24fb7-3e1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.79.201:56200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843015, "uuid": "1b048487-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://full-room4.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843067, "uuid": "3a2d51cb-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/APLexport", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843126, "uuid": "5d7dd62c-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/GooglePasskeyGOOD", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843126, "uuid": "5d7df089-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/APPLEexport", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843126, "uuid": "5d7e25fe-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/googleDataExport", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843186, "uuid": "8145b474-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/GGLDataExport", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843192, "uuid": "84b0c8b1-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/Dopafab", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843192, "uuid": "84b0d686-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/Sobese", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843192, "uuid": "84b0d7b6-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/Biyubare", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843192, "uuid": "84b0daa4-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/Lamimimi", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843192, "uuid": "84b0ddab-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/Verole", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843192, "uuid": "84b0e7a4-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/Gonelijek", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843256, "uuid": "aaa713e2-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://backy-ard5.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843427, "uuid": "10f54450-3e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.60.77.123:52740/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843428, "uuid": "1159b40b-3e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.113:37317/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843666, "uuid": "9f274d4d-3e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.160.11/gPasskey", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843672, "uuid": "a284656b-3e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sideview6.po3vaxil.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843803, "uuid": "f0e8df06-3e1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.95.76:58388/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843845, "uuid": "09c11982-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.76/Nazoboje", "Tag": [ { "name": "46-151-182-76", "colour": "#253b4c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843845, "uuid": "0a1de6d2-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.76/Cayuhi", "Tag": [ { "name": "46-151-182-76", "colour": "#253b4c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843912, "uuid": "31d64645-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://good-news1.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843924, "uuid": "38b54534-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.111.43:56567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843924, "uuid": "38bd7745-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.215.123:38651/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776843980, "uuid": "5a88ccbf-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.134.198:40571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844215, "uuid": "e627da16-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-ti-me2.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844397, "uuid": "52d5b9c2-3e20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.110.50:38787/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844463, "uuid": "7a7803bb-3e20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.42.14:41959/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844626, "uuid": "db8f78f1-3e20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.40/win64.vbs", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844627, "uuid": "dc1bcbdb-3e20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.180.160:44836/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844629, "uuid": "dd6387d1-3e20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.40/config.txt", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844631, "uuid": "de6b5c8e-3e20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://realfact3.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844687, "uuid": "ff779f8f-3e20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.40/win32.vbs", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844779, "uuid": "367ce018-3e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.199.152:60277/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844927, "uuid": "8ece3f93-3e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.151.182.40/r/oueia.txt", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844927, "uuid": "8ee58eab-3e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.204.113:37317/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844929, "uuid": "8fc3754a-3e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.2.96:52763/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776844930, "uuid": "904f5543-3e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nice-shot4.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845114, "uuid": "fe4d28a9-3e21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.95.76:58388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845360, "uuid": "90a1e3bd-3e22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.7.222:42489/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845532, "uuid": "f7a5e9e7-3e22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://just-ta-lk5.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845541, "uuid": "fcb2f6bc-3e22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.180.160:44836/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845713, "uuid": "633f3387-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://easy-task6.kymle9rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845830, "uuid": "a947444b-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.163.187.71:52330/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a9550dde-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.117.70:43631/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a959be6f-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.210.81:52053/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a96afaca-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.83.225:42752/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a96d0848-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.220.130:58982/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a9847630-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.22.107:44241/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a996feca-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.154.118.223:55863/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a99a7ec4-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.46.218:42756/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a9b96ec4-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.58.211.33:33623/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a9d58834-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.6.252:43592/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845831, "uuid": "a9dd06fa-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.129.254:33951/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "a9e16a9e-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.197.182:41054/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "a9f97d9d-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.30:42608/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "a9fb5bf9-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.110.98:54725/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "a9fba33c-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.72.30:42608/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "a9fe15c1-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.241.116:52193/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "a9fefe3a-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.125.60.152:37787/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "aa048053-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.76.126:52201/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "aa0666ce-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.129.254:33951/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "aa06f98d-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.227.255.138:42303/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845832, "uuid": "aa0baf78-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.159.73:48034/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845888, "uuid": "cb6363b5-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:45975/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845889, "uuid": "cc2ef62d-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://109.236.46.199:44955/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "cc9c24d5-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.227.255.138:42303/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "cc9d1ff2-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:46719/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "cc9e50ca-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.152.174:51080/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "cc9e63c8-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.102.253:44314/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "ccaa9ad0-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.136.154:58951/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "ccb36b86-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.177.32.104:45637/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "ccb36dfc-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.2.96:52763/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "ccdf65cc-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.210.132:33261/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "ccedd4b2-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.210.132:33261/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "ccff435a-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.254.120.77:49757/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845890, "uuid": "cd08245a-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.226.200:33077/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845891, "uuid": "cd0e18e6-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.233.121:44418/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845891, "uuid": "cd24f699-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.158.4:53358/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845891, "uuid": "cd2c2447-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.192.148:50854/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845891, "uuid": "cd504647-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.59.82.22:41069/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845893, "uuid": "ce47e2dd-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tasty-pie1.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845946, "uuid": "ee50acb0-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.163.187.71:52330/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845949, "uuid": "efb3b44c-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.223.124:58281/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845949, "uuid": "efc9a154-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.120.230:43757/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845949, "uuid": "efd83a01-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.185:59989/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845949, "uuid": "efdb8d41-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.5.58:47466/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845949, "uuid": "f001ba3c-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.58.211.33:33623/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845949, "uuid": "f0186163-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.206.205.54:34463/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845949, "uuid": "f01898e4-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.37.151.8:41472/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845949, "uuid": "f0276a29-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.25.185:59989/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845949, "uuid": "f03397d6-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.180.110:56570/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845950, "uuid": "f0580144-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.35.126.149:57425/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845950, "uuid": "f05efbd2-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.193:40194/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845950, "uuid": "f0667ec9-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.110.97:47547/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845950, "uuid": "f069f32a-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.36.47:51751/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845955, "uuid": "f331cde1-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.127.166:52992/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776845955, "uuid": "f35f1232-3e23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.119.193:40194/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846011, "uuid": "1508bd89-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.102.253:44314/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846011, "uuid": "151d7e49-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.220.130:58982/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846011, "uuid": "152847fc-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.87.137:39740/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846011, "uuid": "1529119a-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.197.182:41054/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "1537cffe-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.180.87:34162/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "1551e947-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.26.29:33208/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "1556e55b-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.120.129:34202/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "156cdd6b-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.177.32.104:45637/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "15732236-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.245.139.161:54495/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "15747f26-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.215.185.216:53633/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "159b214b-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.172.6:42341/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "15aa5eac-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.37.212.103:56557/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "15b9d399-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.249.250.99:57693/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846012, "uuid": "15c142dd-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.249.250.99:57693/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846013, "uuid": "15fa9405-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.191.47.203:49872/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846014, "uuid": "16cf2d49-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.37.212.103:56557/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846068, "uuid": "371c6f56-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.238.27.138:57400/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846069, "uuid": "379acbc2-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.147.100.200:44721/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846069, "uuid": "37b2fbb0-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.158.4:53358/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37bd63f4-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.79.136.154:58951/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37c09be0-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.200.236:41439/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37c71fa1-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.47.120.129:34202/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37ca4604-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.44.158:56889/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37d1291f-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.6.252:43592/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37d892af-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.152.174:51080/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37d8a4b6-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.110.97:47547/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37da89b1-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.191.47.203:49872/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37de0dd3-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.110.98:54725/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37de1a7a-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.26.29:33208/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "37f1b733-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.149.73:55985/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "38228311-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.38.235:56452/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "383ea631-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.149.73:55985/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "38443c74-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.108.139:46557/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "38453589-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.215.220:56289/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "38459350-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.108.139:46557/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846070, "uuid": "3849ed07-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.109.82:42557/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846071, "uuid": "38753bce-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.253.129.91:8518/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846075, "uuid": "3b23662a-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.253.129.91:8518/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846127, "uuid": "5a37f807-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:45975/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846128, "uuid": "5a52b65e-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.22.107:44241/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846128, "uuid": "5a64d084-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.216.214:41123/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846129, "uuid": "5b66ba91-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.175.204:50581/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846134, "uuid": "5e6b16a9-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.140.44.96:44369/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846255, "uuid": "a674282e-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweet-bun2.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846258, "uuid": "a7fe7b3d-3e24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.199.152:60277/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846614, "uuid": "7c5a094b-3e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hot-soup3.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846728, "uuid": "c079ae9f-3e25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.177.135:50524/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846847, "uuid": "075e5527-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.236.60/dl/install.msi", "Tag": [ { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846855, "uuid": "0baf4be0-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.44.253:8080/2.exe", "Tag": [ { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RustDesk", "colour": "#d474e9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846858, "uuid": "0db41fa9-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.44.253:8080/Isass.exe", "Tag": [ { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846863, "uuid": "10c41696-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.44.253:8080/1.exe", "Tag": [ { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846922, "uuid": "340cb034-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.68.197:38431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846977, "uuid": "548a15b9-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.44.213:8080/Isass.exe", "Tag": [ { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846977, "uuid": "549f67c5-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.44.213:8080/1.exe", "Tag": [ { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776846977, "uuid": "54b6f1ac-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.44.213:8080/2.exe", "Tag": [ { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RustDesk", "colour": "#d474e9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847034, "uuid": "769e76aa-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.44.190:8080/1.exe", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847039, "uuid": "79b6ad0c-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.44.190:8080/Isass.exe", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847039, "uuid": "79d72145-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.111.43:56567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847043, "uuid": "7c02088b-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.107.44.190:8080/2.exe", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RustDesk", "colour": "#d474e9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847086, "uuid": "95719145-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.236.60/dl/small.bat", "Tag": [ { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847088, "uuid": "968c0b9f-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.236.60/dl/putty.msi", "Tag": [ { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847148, "uuid": "baa37b5a-3e26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fresh-tea4.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847328, "uuid": "25ebfdc9-3e27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.236.60/2.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "MarkGramStealer", "colour": "#b804dc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847328, "uuid": "25ec184b-3e27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.31.236.60/1.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "MarkGramStealer", "colour": "#b804dc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847333, "uuid": "2898e7ae-3e27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cool-mi-lk5.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847346, "uuid": "308f3fc7-3e27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.65.240:60301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847569, "uuid": "b5c4e45f-3e27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://purewater6.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847806, "uuid": "42fab34d-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://2.26.84.151:8080/bot.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847807, "uuid": "432f25cc-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.68.99.77/Vision.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847808, "uuid": "43de0b3c-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847808, "uuid": "440b572e-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847810, "uuid": "455bb555-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.36.117.71/bot_linux_x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847810, "uuid": "455d9bb9-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.36.117.71/kaf.x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847810, "uuid": "455f485c-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.36.117.71/kaf.64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847811, "uuid": "458ecd78-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.36.117.71/kaf.86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847813, "uuid": "471a0051-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.36.117.71/bot_mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847813, "uuid": "471a0468-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.36.117.71/linux_bot.py", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847813, "uuid": "471a2c49-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://54.36.117.71/toxnet.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847821, "uuid": "4bc817dc-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.135.194.4:8080/c2agent", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776847874, "uuid": "6b26fc1b-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://black-hat1.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848048, "uuid": "d3235171-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.76.199.154:8888/payload.elf", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "ConnectBack", "colour": "#4be568", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848049, "uuid": "d35aa54d-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.76.199.154:8888/pro_payload.exe", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848049, "uuid": "d37120f5-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.76.199.154:8888/payload_exe", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848049, "uuid": "d387f04f-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.76.199.154:8888/payload.exe", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848050, "uuid": "d4773834-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.76.199.154:8888/pro_stager.exe", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848056, "uuid": "d7bc19f1-3e28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.113.148.179:39635/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848233, "uuid": "4101d053-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://white-shirt2.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848245, "uuid": "485bc0a5-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.220.17:52150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac09a7f2-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.mips", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac13085f-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.x86", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac139ce4-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.mpsl", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac139e67-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.arm", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac17bab8-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.arm6", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac17bd4c-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.m68k", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac20ea1f-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/debug", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac2543c5-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.spc", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac25aa22-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.i686", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac26cce2-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.sh4", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac2a18c6-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.ppc", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848412, "uuid": "ac2cae3b-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.arc", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848413, "uuid": "ac55631c-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.aarch64", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848413, "uuid": "ac5600cb-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.arm5", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848413, "uuid": "ac6a57a4-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.91.86.92/luxzzxzzx/luxzz.x86_64", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848532, "uuid": "f389c04b-3e29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.93.254:45476/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848593, "uuid": "17c5a6f3-3e2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://long-belt3.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848600, "uuid": "1c4fccfc-3e2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.159.73:48034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848829, "uuid": "a479ff12-3e2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-co-at4.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776848832, "uuid": "a6681504-3e2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.205.52:48665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776849021, "uuid": "17014830-3e2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.41.59:54008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776849246, "uuid": "9d2e57e1-3e2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://new-style5.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776849547, "uuid": "506a092c-3e2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://best-look6.bovla5xel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776849566, "uuid": "5bfcea03-3e2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.172.238:49871/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850029, "uuid": "6f91a4b1-3e2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sunny-day1.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850331, "uuid": "23f9eb20-3e2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rainy-ni-ght2.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850692, "uuid": "fab05f05-3e2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.205.52:48665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850752, "uuid": "1eebf644-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://clearsky3.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850815, "uuid": "44068e1f-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/amd64", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850865, "uuid": "624c6ba7-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bee", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850867, "uuid": "635d5063-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/arm", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850867, "uuid": "63618824-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/arm5", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850867, "uuid": "63687221-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/amd64", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "8cdc17f7-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/wget.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "8cde2f61-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/mipsel", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "8ce20b94-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/ppc", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "8ce242e9-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/x86", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850937, "uuid": "8ceaeb52-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/mips", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850938, "uuid": "8d8f0e03-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/c.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "90822827-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/sh4", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "9085b089-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/m68k", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "90870804-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/i686", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850943, "uuid": "908d5f63-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/arm7", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850990, "uuid": "ac56aba4-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-snow4.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850998, "uuid": "b1360c59-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/w.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776850998, "uuid": "b13e37d6-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.36:40012/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851047, "uuid": "cea1bc1f-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.177.135:50524/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "f2106b93-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/dvr", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "f2252a70-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/g", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "f23ae70e-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/c", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851107, "uuid": "f23ef2eb-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/cn", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851121, "uuid": "fae8c3eb-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/ftpget.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851122, "uuid": "fb8b50ed-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/c.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851123, "uuid": "fb93a370-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/bins/mpsl", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851123, "uuid": "fb9d44d7-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/dvr.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851123, "uuid": "fbbb662f-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/curl.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851123, "uuid": "fbc364b7-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/d.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851184, "uuid": "206816ed-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.246.196:39727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851304, "uuid": "67753d4c-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.172.238:49871/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851351, "uuid": "83b1bd69-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-fi-re5.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851353, "uuid": "84bff54b-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.60.224:56777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851407, "uuid": "a512d058-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/sep", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "a5d78844-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/t", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "a5d78f2a-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/tp", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "a5d7b958-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/w.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "a5da1012-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/ssh.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "a5f125c3-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/tftp.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851408, "uuid": "a5f12f55-3e30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://208.84.100.209/p.sh", "Tag": [ { "name": "208-84-100-209", "colour": "#6c8fc5", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851652, "uuid": "37726df1-3e31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lightmoon6.zom2lirex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851658, "uuid": "3ac64bf9-3e31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.45.136:59876/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776851768, "uuid": "7c7e112c-3e31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.234.46:44742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776852017, "uuid": "10c3ce09-3e32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-load1.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776852138, "uuid": "58fce791-3e32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.118:47589/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776852310, "uuid": "bf2e22d5-3e32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lightp-ack2.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776852372, "uuid": "e41d27dc-3e32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.45.27:50023/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776852620, "uuid": "77ea58c7-3e33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.33.31:34402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776852671, "uuid": "96b743bb-3e33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fullbox3.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776852675, "uuid": "98deb2c1-3e33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.229.245:36416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776852740, "uuid": "bf7617d2-3e33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.36:40012/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776852740, "uuid": "bf85371c-3e33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.229.245:36416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776853030, "uuid": "6c93fac0-3e34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://empty-space4.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776853160, "uuid": "b9edcd3e-3e34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.187.36.47:51751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776853272, "uuid": "fcbc0575-3e34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.246.196:39727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776853327, "uuid": "1d946cb5-3e35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.30.244:45296/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776853330, "uuid": "1f817875-3e35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickmove5.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776853688, "uuid": "f49c7fc6-3e35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-point6.wi8sorel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776853697, "uuid": "f9dd0ff7-3e35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.45.27:50023/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776854051, "uuid": "ccdffe27-3e36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tarra4.de1xorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776854228, "uuid": "3655921c-3e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.229.22:34588/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776854228, "uuid": "369e4476-3e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.188.116.140:48861/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776854228, "uuid": "36a3fd95-3e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.188.116.140:48861/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776854234, "uuid": "3a36a222-3e37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.83:54709/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776854593, "uuid": "10116df7-3e38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lopamp4.6zoremax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776854827, "uuid": "9ba455aa-3e38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.255.30.244:45296/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855074, "uuid": "2ecc8332-3e39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://genom-node.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855142, "uuid": "57a6c671-3e39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.206:50826/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855316, "uuid": "bf09cff4-3e39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hillrain.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855381, "uuid": "e5bb11ff-3e39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.176.118:47589/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855449, "uuid": "0e49d88c-3e3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.113.148.179:39635/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855487, "uuid": "252b8684-3e3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haul-sheet.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855728, "uuid": "b4ae90aa-3e3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.229.22:34588/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776855853, "uuid": "ff540d88-3e3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rl3xewp1.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856028, "uuid": "679a4b30-3e3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.229.177:41488/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856154, "uuid": "b2aaa919-3e3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6xsj.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856388, "uuid": "3dce8855-3e3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.245/chilinaskr.xtp", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856388, "uuid": "3dd449e5-3e3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.3.176.245/JpHvuDVLAxTn92.bin", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856452, "uuid": "646c0676-3e3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynlineal8.wentreck.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856455, "uuid": "65e2ac1f-3e3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.216.119:55802/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856643, "uuid": "d6536bcf-3e3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.206:50826/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856809, "uuid": "38bdc936-3e3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pyj8st.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776856888, "uuid": "67f10bc0-3e3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:48341/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776857068, "uuid": "d37ef1ef-3e3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:48341/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776857171, "uuid": "10de9eb6-3e3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://echocanopy.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776857182, "uuid": "1726e12e-3e3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.49.4:53522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776857531, "uuid": "e76931b0-3e3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://majorrapid.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776857768, "uuid": "74ad42d1-3e3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://velvepastu.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776857889, "uuid": "bcf0ec09-3e3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/mudtidai1/adrmpt/releases/download/Chi%CC%81nhphu%CC%8955/Chinhph.55.apk", "Tag": [ { "name": "apk ", "colour": "#b41558", "exportable": true, "hide_tag": false }, { "name": "vietnam", "colour": "#412c93", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776858187, "uuid": "6e97a75f-3e40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://6tn0i.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776858550, "uuid": "4668cf0c-3e41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://neo-s1at.cloafade.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776858801, "uuid": "dc893ece-3e41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.164.149:34367/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776858853, "uuid": "fb50564a-3e41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ke3srk.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859039, "uuid": "6a0894bd-3e42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.73.164.149:34367/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859153, "uuid": "ae1e33b7-3e42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.99.246:51379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859212, "uuid": "d10bd35f-3e42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loc46-cache.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859217, "uuid": "d47d848e-3e42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.60.224:56777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859327, "uuid": "15add6cb-3e43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.87.229.177:41488/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859450, "uuid": "5f2f40ff-3e43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpckch.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859810, "uuid": "35aa65d0-3e44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://skuj.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859880, "uuid": "5f5641b3-3e44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.101.181.9:46434/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776859940, "uuid": "8360352f-3e44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.235.249.74:59110/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860168, "uuid": "0b47fd39-3e45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zencrest8et.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860178, "uuid": "1109a5f2-3e45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.83:54709/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860416, "uuid": "9eddde9b-3e45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.220.58.125:39444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860474, "uuid": "c1ac0739-3e45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://corhard.dashjore.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860539, "uuid": "e857b5df-3e45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.99.251.161:3093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860602, "uuid": "0d961a66-3e46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.49.4:53522/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776860835, "uuid": "9865d475-3e46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://inde-fer.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776861131, "uuid": "48cb563e-3e47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://3jms0.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776861487, "uuid": "1d41b7c2-3e48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ays2jm.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776861635, "uuid": "7545b3e8-3e48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.177.21.10:50082/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776861737, "uuid": "b2464213-3e48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://203.101.181.9:46434/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776861792, "uuid": "d3570bbd-3e48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quotaraven.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776861857, "uuid": "f9dbb58b-3e48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.16.92:33109/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776862039, "uuid": "663b0a40-3e49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.76.126:52201/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776862092, "uuid": "85cbd318-3e49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sc4nn-point.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776862338, "uuid": "18667090-3e4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.171.177:55366/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776862451, "uuid": "5c1cccf5-3e4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmprairie.protocave.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776862512, "uuid": "80435756-3e4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.24.255:43912/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776862579, "uuid": "a84b6b6b-3e4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.28:43185/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776862749, "uuid": "0db2062f-3e4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.5.28:43185/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776862808, "uuid": "30b557c8-3e4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sort5-logic.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776863110, "uuid": "e4694aa4-3e4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://snowsketc.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776863467, "uuid": "b9817a96-3e4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gfpb.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776863540, "uuid": "e4fb7106-3e4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.171.177:55366/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776863769, "uuid": "6d3a5688-3e4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-markis.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776864129, "uuid": "43fc6054-3e4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://1ayo-port.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776864427, "uuid": "f5c3486e-3e4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://activeserver.infirmary5care.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776864438, "uuid": "fbf2065a-3e4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.37.151.8:41472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776864739, "uuid": "af8ae518-3e4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.79.201:56200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776864790, "uuid": "ce101913-3e4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dmnoyvf.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776865089, "uuid": "806a312c-3e50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xg6xtld1.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776865449, "uuid": "56c55a1b-3e51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://split-pulse.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776865634, "uuid": "c4d8c2ad-3e51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.11.248.133:40811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776865813, "uuid": "2fda191c-3e52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://zxvy.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776865818, "uuid": "32ab0bb9-3e52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.135.129:54089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866048, "uuid": "bbaa2bd9-3e52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://minor-mon.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866469, "uuid": "b68894c4-3e53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brookprime.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866475, "uuid": "ba5528fc-3e53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.106:35272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866656, "uuid": "260a6a9b-3e54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.5.213:46179/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866713, "uuid": "4841f80a-3e54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.223.143:40539/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866721, "uuid": "4d3a3593-3e54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://140.237.36.79:60398/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866828, "uuid": "8c79202e-3e54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.32.208:51903/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866829, "uuid": "8d1f5db4-3e54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tzlajh.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866842, "uuid": "95285867-3e54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.183.196.87:57863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776866890, "uuid": "b1dd37a1-3e54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.5.213:46179/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776867069, "uuid": "1ca998bf-3e55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tensorextrac.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776867130, "uuid": "41110950-3e55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.29.46.195:43547/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776867433, "uuid": "f5804793-3e55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ifzyk85.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776867554, "uuid": "3db61d10-3e56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.135.129:54089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776867727, "uuid": "a45a8fbb-3e56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sapdecode.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776868089, "uuid": "7c487b2d-3e57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fre1ght-mark.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776868388, "uuid": "2ec3e262-3e58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9rg153d.decay5obes.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776868517, "uuid": "7b45da6c-3e58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.138.223.143:40539/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776868627, "uuid": "bce0f329-3e58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.12.254:38275/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776868748, "uuid": "054e4960-3e59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynlith7os.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776868760, "uuid": "0c3d4db4-3e59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.183.196.87:57863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776869116, "uuid": "e05deb71-3e59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://trusbyt.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776869358, "uuid": "71048458-3e5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.162.208:33775/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776869410, "uuid": "8fcaed62-3e5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://4t0mi-core.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776869710, "uuid": "4295b58d-3e5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rnoun3-mesh.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776869718, "uuid": "475a0441-3e5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.54.183.204:46031/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776869898, "uuid": "b25d88dd-3e5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.201.217:51860/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776870071, "uuid": "19e74763-3e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-1ce.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776870148, "uuid": "4780fe3c-3e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.155.211:43595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776870431, "uuid": "f00cc778-3e5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://revlogi.credibil-debauch.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776870667, "uuid": "7d39ff74-3e5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://primeambe.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776871087, "uuid": "77295623-3e5e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://agentdel.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776871326, "uuid": "0602f8dd-3e5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.85.134:35382/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776871398, "uuid": "30f8b3ee-3e5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.56.208:58851/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776871449, "uuid": "4f0b000f-3e5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://solforge2ar.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776871520, "uuid": "796ed13a-3e5f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.247.155.211:43595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776871748, "uuid": "0176e298-3e60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://co1o-grid.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776872049, "uuid": "b47f37bd-3e60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://coremount.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776872055, "uuid": "b85db517-3e60-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.78.200:53731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776872350, "uuid": "67f4ef70-3e61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sernex1al.greecesco7es.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776872359, "uuid": "6d8340de-3e61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.234.30:46486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776872526, "uuid": "d11660c1-3e61-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.140.160.76:52416/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776872767, "uuid": "6066ec45-3e62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://polatren.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776872775, "uuid": "65297f44-3e62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.211.56.208:58851/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776872901, "uuid": "b0ad77f1-3e62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.64.135.181:37899/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873021, "uuid": "f7e37826-3e62-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.88.231:46035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873308, "uuid": "a3646b82-3e63-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://n0de6-node.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873548, "uuid": "320973ab-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://717mupv.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873560, "uuid": "39a53ec0-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.94/x86_64", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873561, "uuid": "39a67bbd-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.94/arm7", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873561, "uuid": "39a68580-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.94/mipsel", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873561, "uuid": "39a718ef-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.94/arm", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873561, "uuid": "39b72ee7-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.94/arm5", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873561, "uuid": "39b73569-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.94/mips", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873561, "uuid": "39b92118-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.94/arm6", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873727, "uuid": "9cf97b69-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kernalstress.st/mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873727, "uuid": "9d0e9924-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kernalstress.st/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873727, "uuid": "9d13f1be-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kernalstress.st/arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873727, "uuid": "9d144fbd-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kernalstress.st/mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873728, "uuid": "9d7e22c2-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://quarryhaul.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873728, "uuid": "9daa29b0-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kernalstress.st/arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873731, "uuid": "9efb4e25-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kernalstress.st/arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873786, "uuid": "bfdf3880-3e64-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://kernalstress.st/arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "kernalstress-st", "colour": "#9e8fb8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776873968, "uuid": "2cba4669-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.129.141:48483/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874147, "uuid": "9752985f-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://f0rm-mount.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874210, "uuid": "bc7c6a7f-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/c.sh", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874210, "uuid": "bd0a230e-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_i586", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874211, "uuid": "bd90850f-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_mips", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874212, "uuid": "bde4f78f-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_x86", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874213, "uuid": "bed72172-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_mips64", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "bee01dcb-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_arm6", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "bef137be-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_i686", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "bef14902-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_i486", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "bf0bd814-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_arm", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "bf2b2e89-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_mpsl", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874214, "uuid": "bf319ca4-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_ppc", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874218, "uuid": "c1a277eb-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/diicot.sh", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874219, "uuid": "c265c014-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_m68k", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874219, "uuid": "c26956e0-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_arm5", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874220, "uuid": "c277ed8e-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_aarch64", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874220, "uuid": "c2dd7fa9-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_sh4", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874220, "uuid": "c2e3ed4b-3e65-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.20/static/ciubuc_arm7", "Tag": [ { "name": "176-65-139-20", "colour": "#2abb93", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874386, "uuid": "25a5309d-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874387, "uuid": "2662a6e1-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874390, "uuid": "282558ea-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874390, "uuid": "285099af-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874390, "uuid": "285bfc7d-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874390, "uuid": "285c0175-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874391, "uuid": "2894f6e1-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874391, "uuid": "28d942d5-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_mips64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874391, "uuid": "28e1b9f9-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874392, "uuid": "29139f4c-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874392, "uuid": "292974cd-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874392, "uuid": "293b8723-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://9871mi.idol-worship.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874446, "uuid": "49862904-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874446, "uuid": "49b10600-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_i586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874447, "uuid": "49cbcd84-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_aarch64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874449, "uuid": "4b1f7a47-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/static/ciubuc_arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874748, "uuid": "fd8fd262-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/c.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874749, "uuid": "fe0d058f-3e66-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://datasurge-bot.online/diicot.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "datasurge-bot-online", "colour": "#d3f86a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874811, "uuid": "23431c1a-3e67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mme4po.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776874928, "uuid": "68f0cf09-3e67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.216.119:55802/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875109, "uuid": "d4b2a76e-3e67-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ship-obser.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875228, "uuid": "1bcdbac5-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.86.252:37966/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875414, "uuid": "8a9401f3-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ter8k.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad304f36-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.powerpc", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad304f57-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.mipsrouter", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad352fb1-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.armv4l", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad362738-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.mips", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad3a1b00-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/cat.sh", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad3a321f-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.mipsel", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad3a47a0-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.x86_64", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad3a572e-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.armv7l", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad3a6030-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.sparc", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad3fa8b4-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.armv5l", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad45aa5f-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.armv6l", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad45aac5-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.sh4", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875472, "uuid": "ad4666a0-3e68-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.35/iran.m68k", "Tag": [ { "name": "176-65-139-35", "colour": "#627d17", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875771, "uuid": "5f59f672-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://indexwho.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875829, "uuid": "81c67db2-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.130/mirai.mips", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875837, "uuid": "86456fca-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.130/mirai.arm7", "Tag": [ { "name": "176-65-139-130", "colour": "#a3e7a8", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875898, "uuid": "aab30986-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/hb8ipc.sh", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "af9335d6-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/mipsle", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "afa31451-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/x86", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "afadda10-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/arm64", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "afb244d3-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/arm", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "afb80aab-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/arm7", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "afd3a04d-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/arm5", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875906, "uuid": "afdc1d73-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/mips", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776875959, "uuid": "cf385483-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.131/arm6", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876021, "uuid": "f3ef44ff-3e69-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/bins.sh", "Tag": [ { "name": "176-65-139-59", "colour": "#2abc3a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876072, "uuid": "12c1603f-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.86.187:53192/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876133, "uuid": "370213f7-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cinemapassive.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876261, "uuid": "838314a7-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.13.223:38421/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876368, "uuid": "c2c8dbdd-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876372, "uuid": "c59b384b-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fkftn4.multi-machine.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "c7e664b5-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.spc", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "c7e67187-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.mips", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "c7ef3287-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.m68k", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "c7efb6fe-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.arm7", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876376, "uuid": "c7f5b404-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.arm5", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876378, "uuid": "c947c437-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.ppc", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876379, "uuid": "c9541aa5-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.sh4", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876380, "uuid": "ca7098d0-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/ohshit.sh", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876381, "uuid": "caef7155-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.i486", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876381, "uuid": "cb011f75-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/bin.sh", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876445, "uuid": "f0bbf158-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.x86", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876445, "uuid": "f0c8c52a-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.arm", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876445, "uuid": "f0ce45e2-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.arm6", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876487, "uuid": "0a1d447d-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876489, "uuid": "0b19161b-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.spc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876491, "uuid": "0c5ab6bb-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e343dd2-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e344747-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.i486", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e34570a-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e40f4cf-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e40f6aa-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e410a7c-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e412c56-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e4913ca-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e49278f-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876494, "uuid": "0e493607-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876495, "uuid": "0e75b1fb-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876502, "uuid": "131920fb-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.i686", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876508, "uuid": "16a6d359-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.69/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876551, "uuid": "304d67bd-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://jbrj92scltrbtv7mzejvmovw.duckdns.org/ohshit.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "jbrj92scltrbtv7mzejvmovw-duckdns-org", "colour": "#cf84b7", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "a4966e2e-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/pmpsl", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "a49676d6-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/parm6", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "a4969b4f-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/pppc", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876746, "uuid": "a499c439-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/pmips", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876791, "uuid": "bf5a28c9-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glossink.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876799, "uuid": "c415b28f-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/psh4", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876799, "uuid": "c415cfc2-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/pspc", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876799, "uuid": "c415d58a-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/parm", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876800, "uuid": "c46d6bcb-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.175.204:50581/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876801, "uuid": "c56b8134-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/px86", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876802, "uuid": "c573c9cf-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/parm5", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876802, "uuid": "c573cb57-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.76/bins/pm68k", "Tag": [ { "name": "176-65-139-76", "colour": "#df16c6", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776876860, "uuid": "e821f8ca-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.224.78:45371/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "4e8d6234-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/psh4", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "4e8eb255-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/pmips", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "4e90947a-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/parm", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "4e91005d-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/parm6", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "4e986778-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/pm68k", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "4e995dd6-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/pppc", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "4ea11edb-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/pmpsl", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "4ea48cf0-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/parm7", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877032, "uuid": "4ea95af1-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/x86_64", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877035, "uuid": "50d2c2a7-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/px86", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877040, "uuid": "53d20651-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/parm5", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877041, "uuid": "54002f35-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.104/bins/pspc", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877094, "uuid": "73e49f5a-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scann1-cast.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877151, "uuid": "95f6332e-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/pm68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877151, "uuid": "95ffb5fc-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/psh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877152, "uuid": "9614f8f9-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/parm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877153, "uuid": "9712aa82-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/pspc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877153, "uuid": "9725d68c-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/px86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877153, "uuid": "97345b73-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/parm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877154, "uuid": "973ec028-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/pmpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877155, "uuid": "9851d0d6-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/pppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877155, "uuid": "9856fa9f-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/x86_64", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776877155, "uuid": "98570637-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/parm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878058, "uuid": "b27b5b7e-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/pmips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878058, "uuid": "b2803ec1-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://madroxreborn.lol/bins/parm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "madroxreborn-lol", "colour": "#b2c2d1", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878058, "uuid": "b2855597-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://iz7v.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878060, "uuid": "b3cde800-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/x86", "Tag": [ { "name": "176-65-139-143", "colour": "#9bf76a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878060, "uuid": "b3ce24bf-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.143/x86_32", "Tag": [ { "name": "176-65-139-143", "colour": "#9bf76a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878061, "uuid": "b406b5a8-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://parcelmod.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878061, "uuid": "b4078ff7-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://azureaud.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878062, "uuid": "b4cb3d1c-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.86.187:53192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878356, "uuid": "63dea144-3e6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cxti.blackbirdr0ot.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878437, "uuid": "942b9001-3e6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.219.0:59794/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878601, "uuid": "f5d27973-3e6f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.167:49825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776878716, "uuid": "3a5a920f-3e70-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorlithum.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879132, "uuid": "32b5f0e7-3e71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thorneur.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879434, "uuid": "e6cf497d-3e71-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://forg-scann.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879673, "uuid": "74ba41ce-3e72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://a0uq.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879804, "uuid": "c2f047c7-3e72-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.14.111:46003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879917, "uuid": "064a7646-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.46.114:50208/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879922, "uuid": "095e6749-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.93.113:34932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879972, "uuid": "2704cf5a-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/bot_x86.exe", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879972, "uuid": "27220d0b-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/bot.exe", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879978, "uuid": "2aa772c2-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_arm", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879978, "uuid": "2ab2f0dd-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_sh4", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879979, "uuid": "2b58991b-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_m68k", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879979, "uuid": "2b803713-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_mpsl", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879980, "uuid": "2c032e4c-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_arm7", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "2dea2aa3-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_ppc", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "2e07481a-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_arm6", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879983, "uuid": "2e07480f-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_x86", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "2e11c22d-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_x86_64", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "2e11f94f-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_mips", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "2e397d62-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/mipsle", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "2e412865-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/main_arm5", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "2e585104-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/x86", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776879984, "uuid": "2e6c9b91-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.146/mips", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776880092, "uuid": "6e7bfbb7-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cliffcrims.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776880326, "uuid": "f9f1668c-3e73-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.99.48:60715/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776880343, "uuid": "04565cd6-3e74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.234.116:47900/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776880389, "uuid": "1f9439cc-3e74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cach8-stack.histor5corching.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776880459, "uuid": "4963ea83-3e74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.87.167:49825/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776880586, "uuid": "9513582b-3e74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.219.0:59794/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776880628, "uuid": "adff3a52-3e74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.7.209:39779/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776880694, "uuid": "d589b68c-3e74-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://t1ny-spool.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776881052, "uuid": "ab20750e-3e75-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lqfrhvos.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776881227, "uuid": "12ff84ca-3e76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.32.208:51903/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776881415, "uuid": "8375b96d-3e76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pkqwqx.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776881431, "uuid": "8cfeee5a-3e76-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.219.14.111:46003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776881710, "uuid": "32dd770e-3e77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fierce-frame.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776881766, "uuid": "54907970-3e77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/jewn.sh", "Tag": [ { "name": "176-65-139-141", "colour": "#ff62fa", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776881962, "uuid": "c93b526a-3e77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.199.194.59:37879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882024, "uuid": "ee62ef3a-3e77-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.213.35:38727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882068, "uuid": "08b63a36-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dn17wscb.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882128, "uuid": "2c05195d-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.54.204:40019/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882391, "uuid": "c9521788-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://teslasuit.to/newuu.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882392, "uuid": "c960fdee-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.teslasuit.to/newuu.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882392, "uuid": "c9619b9d-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://teslasuit.to/newuu.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882392, "uuid": "c9652608-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.teslasuit.to/newuu.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882393, "uuid": "ca62824b-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/file/d/1SVxKP_9KaxVI8z46PV5zkp3grc-i2ckQ/view?usp=sharing_eil&%3Bts=69e7c6ac&%3Bsh=u756Kmhy4TxtnE3m&%3Bca=1", "Tag": [ { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882394, "uuid": "cac64e8a-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lkgkdsjd.com/jpn.7z", "Tag": [ { "name": "pw-pzp", "colour": "#c88773", "exportable": true, "hide_tag": false }, { "name": "pwn-pzp", "colour": "#e194ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882394, "uuid": "cb002894-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.teslasuit.to/update.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "cb206794-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.173.143.107/web/update.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "cb38532d-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/bot_arm64", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "cb4b75f0-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/bot_linux_x86_64", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "cb4f5177-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vanillamods.xyz/api/ps", "Tag": [ { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "cb54fd67-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/bot_i386", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "cb557256-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/bot_armv7", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882395, "uuid": "cb707007-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/bot_mips", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882397, "uuid": "ccbca99d-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vanillamods.xyz/api/dps", "Tag": [ { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882398, "uuid": "cd189fc7-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lkgkdsjd.com/s.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882399, "uuid": "cd8b3454-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://vanillamods.xyz/api/selfupdater", "Tag": [ { "name": "RapidStealer", "colour": "#cbbd7c", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882399, "uuid": "cdc2cd15-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cargoisle.svolota-player.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "df32e9ec-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/rename_bots.sh", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "df3b4c2b-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/check_bots.sh", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "df5b9218-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/bot_mips64el", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882428, "uuid": "df5f3be9-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/bot_ppc64el", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882429, "uuid": "df714897-3e78-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/bot_mipsel", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882486, "uuid": "01ea6a94-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.42/bins/bot_s390x", "Tag": [ { "name": "176-65-139-42", "colour": "#863990", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882608, "uuid": "4a65112b-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://158.94.208.60/bin/support.client.exe", "Tag": [ { "name": "158-94-208-60", "colour": "#741d69", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882729, "uuid": "92a0db14-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gufnz2.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "98c50ca3-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "98cd7cdb-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.riscv64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "98cd961d-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "98cdecaa-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.s390x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "98d187b1-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "98e032a1-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "98e05b57-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "98e7d7c1-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776882740, "uuid": "98ee812c-3e79-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883028, "uuid": "44a002ba-3e7a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yjbkbpa.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883390, "uuid": "1c7c9ef9-3e7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://c1ini-phase.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883576, "uuid": "8b78e741-3e7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.107.16.92:33109/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883576, "uuid": "8b8b7dfa-3e7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.36.229:49781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883694, "uuid": "d1a9ac60-3e7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://darktermi.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883758, "uuid": "f7e7a5e6-3e7b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.213.35:38727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883868, "uuid": "399d36c9-3e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.199.194.59:37879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883988, "uuid": "80c6b9ba-3e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://visualpure.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883988, "uuid": "810aaf2e-3e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://158.94.210.217/bin/support.client.exe", "Tag": [ { "name": "158-94-210-217", "colour": "#767df6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776883996, "uuid": "85b013f4-3e7c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.117.70:43631/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776884227, "uuid": "0f59e339-3e7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.6.145:35868/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776884348, "uuid": "57c70f23-3e7d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blzlet.5zorelin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776884650, "uuid": "0ba92553-3e7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://oxhlrfs.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776884834, "uuid": "7956e38d-3e7e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.10.36.229:49781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885067, "uuid": "042030e5-3e7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://eufkpp.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885139, "uuid": "2f3376e2-3e7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.48.139:53777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885314, "uuid": "9739ede3-3e7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://faithfulvector.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885426, "uuid": "d9d6ff49-3e7f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.201.217:51860/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885726, "uuid": "8cf1d08d-3e80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.6.145:35868/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885732, "uuid": "903bf648-3e80-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hubspruc.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885923, "uuid": "0256bcb0-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.209.76.246:54822/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776885973, "uuid": "2051f0e3-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/s-h.4-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886030, "uuid": "420412b7-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmlunar.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "42759782-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/m-p.s-l.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "4275979e-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/x-3.2-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "427dbf71-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/m-6.8-k.Sakura", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "427dc648-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/i-5.8-6.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "4281ed74-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/m-i.p-s.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "4287ad92-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/a-r.m-7.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "42906655-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/p-p.c-.Sakura", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "4290ccf4-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/a-r.m-4.Sakura", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "429253bd-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/Sakura.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "42925eca-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/x-8.6-.Sakura", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "42928587-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/a-r.m-5.Sakura", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886031, "uuid": "42949cc7-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://195.238.123.165/a-r.m-6.Sakura", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886098, "uuid": "6abc9499-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.38.79.137:47753/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886163, "uuid": "9151176c-3e81-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.237.150:40345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886393, "uuid": "1a5370d5-3e82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr4nd-vault.ra8ximel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886628, "uuid": "a66f004e-3e82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flkqe.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886644, "uuid": "b01d7c14-3e82-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.118.46.114:50208/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776886988, "uuid": "7d42ec2f-3e83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://8rxhman.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776887178, "uuid": "ee4049cb-3e83-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.226.200:33077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776887287, "uuid": "2f00d5a0-3e84-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arktidear7.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776887647, "uuid": "05f18ae0-3e85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://portal-enc.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776887843, "uuid": "7ad321f9-3e85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.122.254:56242/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776888009, "uuid": "dd6deb0f-3e85-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ultra-c4ny0n.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776888309, "uuid": "9042feb3-3e86-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://5565wep5.sylov3er.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776888666, "uuid": "6514a9fd-3e87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr1d1-vector.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776888861, "uuid": "d96a4e08-3e87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.67.103.35:43823/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776888862, "uuid": "d9f05eb7-3e87-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.77.224.72:35646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776888967, "uuid": "18822eff-3e88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fall-ridg.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776889028, "uuid": "3cf20f8f-3e88-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.77.224.72:35646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776889395, "uuid": "17859cf3-3e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.73.110:42070/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776889461, "uuid": "3ed599e8-3e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.122.254:56242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776889568, "uuid": "7f158320-3e89-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hauinn.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776889811, "uuid": "0fa30f06-3e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://offharves.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776889989, "uuid": "79c22fb3-3e8a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://defenvoya.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776890348, "uuid": "4faa6d32-3e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://link6-switch.to2virex.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776890536, "uuid": "bfa014f8-3e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.67.103.35:43823/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776890543, "uuid": "c41789b7-3e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.57.48.22:43134/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776890604, "uuid": "e8370439-3e8b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.57.48.22:43134/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776890649, "uuid": "03398f4e-3e8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://2yxdgkw7.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776891010, "uuid": "da82bbce-3e8c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumdraal1.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776891309, "uuid": "8cb34af2-3e8d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://summit1-stream.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776891666, "uuid": "618ed776-3e8e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://arknex6or.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776891971, "uuid": "17690b10-3e8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://m3rg-watch.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776892153, "uuid": "836698f2-3e8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.92.253:36633/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776892214, "uuid": "a842b66f-3e8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.73.110:42070/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776892328, "uuid": "ebe333e2-3e8f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kpelhw.kymle7rax.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776892688, "uuid": "c2a2d782-3e90-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-5ystem.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776892833, "uuid": "18aa092e-3e91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dl.armour-inc-down.net/in/?YouTubeViewBot", "Tag": [ { "name": "pw-DR67KVLD", "colour": "#7674bc", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776892989, "uuid": "763a926c-3e91-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://flee-line.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893298, "uuid": "2e5c4160-3e92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.153.5:44369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893347, "uuid": "4b0ad977-3e92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://730e.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893352, "uuid": "4e956577-3e92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.46.214:59412/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893421, "uuid": "7770c531-3e92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.89.247:49161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893647, "uuid": "fe2b0743-3e92-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://switc1-index.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893726, "uuid": "2d2b4bff-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.141/bins/nc", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893778, "uuid": "4c130591-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893837, "uuid": "6f470671-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/bot.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893839, "uuid": "704fb293-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "710865b8-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "714c2350-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.s390x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "71599d0b-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "7164ab31-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "716bc000-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "717789d0-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "7177be58-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893840, "uuid": "7177c306-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "717d1a35-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "718e6b99-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "71a47fb2-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "71b4e648-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "71cc34d1-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893841, "uuid": "71e0f44e-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893900, "uuid": "94cf5cbe-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.119.176.206:36218/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893905, "uuid": "981eed83-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893908, "uuid": "99ca8a16-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.s390x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "9ada03e5-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.riscv64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "9aebb26f-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "9b0f5675-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "9b1f327a-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893910, "uuid": "9b2c04a5-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b44c7da-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b46a6d5-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.riscv64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b4967c3-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.x64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b5b8f98-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.aarch64", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b68297b-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.s390x", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b684161-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b7af1f5-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b7f1cbf-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b886c1b-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h3flood.riscv64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b9159e0-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2stream.mips64el", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893911, "uuid": "9b9ad894-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.11/h2rapidreset.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776893948, "uuid": "b1a87e94-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://build-bio.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776894079, "uuid": "ff8c1c58-3e93-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.113.187.91:47205/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776894311, "uuid": "8a1cc667-3e94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://geo-pol4r.po4vaxel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776894491, "uuid": "f5324373-3e94-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.119.176.206:36218/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776894619, "uuid": "4151ade9-3e95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.178.153.5:44369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776894670, "uuid": "600681f0-3e95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://norlineis.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776894741, "uuid": "8a4aa410-3e95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.162.208:33775/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776894912, "uuid": "eff0cda8-3e95-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-sal3s.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895327, "uuid": "e783a8eb-3e96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://0dszydja.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895332, "uuid": "ea64b9c8-3e96-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.113.187.91:47205/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895397, "uuid": "11302514-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.220.17:52150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895570, "uuid": "78394c3b-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-5h4d.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "e284c286-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/guvann/cursor-reset/refs/heads/main/Olympiadic/cursor_reset_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "e2855e03-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/guvann/guvann1/refs/heads/main/confirmatory/guvann-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895748, "uuid": "e29d7a3d-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/canbeMax/Hash_Buster/refs/heads/drylikov/erythrosiderite/Hash_Buster_Hydrophinae.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e2ce9a54-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/canbeMax/CYJL/raw/refs/heads/main/assets/Software-3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e2d4424d-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DavittGamer/DevCrack-Mobile-Interviews/refs/heads/main/credit/Mobile-Dev-Interviews-Crack-v3.2-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e2de733f-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Luffy1402/CrackFtp-la/raw/refs/heads/main/gimped/Ftp-la-Crack-unenslave.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e2f0d12d-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/canbeMax/CYJL/refs/heads/main/assets/Software-3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e2f47d4d-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Luffy1402/CrackFtp-la/refs/heads/main/gimped/Ftp-la-Crack-unenslave.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e2f5a706-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/canbeMax/Online-Timer.github.io/refs/heads/main/Font/Online_Timer_io_github_swainship.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e2f5efc1-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/guvann/cursor-reset/raw/refs/heads/main/Olympiadic/cursor_reset_1.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e332b715-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DavittGamer/social-bar/raw/refs/heads/gh-pages/fonts/social-bar-v3.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e33d59b6-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DevJinma/CrackFtp/raw/refs/heads/main/therence/Ftp-Crack-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e33e6aef-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/canbeMax/Online-Timer.github.io/raw/refs/heads/main/Font/Online_Timer_io_github_swainship.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e3492fb3-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DavittGamer/DevCrack-Mobile-Interviews/raw/refs/heads/main/credit/Mobile-Dev-Interviews-Crack-v3.2-alpha.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895749, "uuid": "e35107f0-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DavittGamer/social-bar/refs/heads/gh-pages/fonts/social-bar-v3.8-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895750, "uuid": "e35b8127-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DavittGamer/prueva/raw/refs/heads/master/Merycoidodon/Software-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895750, "uuid": "e371d960-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/canbeMax/Hash_Buster/raw/refs/heads/drylikov/erythrosiderite/Hash_Buster_Hydrophinae.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895750, "uuid": "e38574c2-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/DavittGamer/GRANDALAND/raw/refs/heads/main/bournless/Software-3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895750, "uuid": "e3dc2790-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DavittGamer/prueva/refs/heads/master/Merycoidodon/Software-v3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895750, "uuid": "e3e0e06c-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/guvann/guvann1/raw/refs/heads/main/confirmatory/guvann-v1.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776895751, "uuid": "e45d9891-3e97-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DavittGamer/GRANDALAND/refs/heads/main/bournless/Software-3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776896709, "uuid": "1f405758-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heicn.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776896711, "uuid": "202d837c-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaul2-sheet.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776896711, "uuid": "20661612-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/DevJinma/CrackFtp/refs/heads/main/therence/Ftp-Crack-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776896712, "uuid": "20d7ed30-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://value-quota.wi9sorin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776896949, "uuid": "ae738be1-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://p68x.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897019, "uuid": "d7f64c0b-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:40472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897127, "uuid": "18658656-3e9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.224.12.254:38275/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897311, "uuid": "85f20196-3e9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mxt0kl.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897426, "uuid": "cab6b016-3e9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.203.68:35628/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897431, "uuid": "cdacd4d1-3e9b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.234.138:49765/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897672, "uuid": "5d6bf91c-3e9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scamanif.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897915, "uuid": "ee13bd93-3e9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Clad-chrism998/WasmCrack/refs/heads/main/src/wasmcrack/struct_solver/Wasm_Crack_3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897916, "uuid": "eebd01c7-3e9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Clad-chrism998/WasmCrack/raw/refs/heads/main/src/wasmcrack/struct_solver/Wasm_Crack_3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897916, "uuid": "eec4ec96-3e9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Pammyhangdog747/claude-cracks-the-whip/refs/heads/main/lapidarist/the_cracks_whip_claude_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897916, "uuid": "eeddcac9-3e9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Pammyhangdog747/claude-cracks-the-whip/raw/refs/heads/main/lapidarist/the_cracks_whip_claude_3.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897917, "uuid": "ef4026d1-3e9c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Skinflareckon10/crack-Adobe-Premiere-2026/releases/download/new/PremierePro2026_28.0_x64.rar", "Tag": [ { "name": "pw-6654", "colour": "#44e540", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897972, "uuid": "10443625-3e9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pin30-sync.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776897977, "uuid": "13022498-3e9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Auranyuentrance/crack-adobe-Illustrator-2026/releases/download/new/Illustrator2026_31.0_x64.rar", "Tag": [ { "name": "pw-8874", "colour": "#814076", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776898042, "uuid": "3a06dd62-3e9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.91.117:40748/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776898271, "uuid": "c23ab256-3e9d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://haul-cache.de6xamel.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776898635, "uuid": "9b36de61-3e9e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-1q.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776898926, "uuid": "48b100dd-3e9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.234.138:49765/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776898932, "uuid": "4c5ff182-3e9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://noir-4.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776898941, "uuid": "5186ac15-3e9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:40472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899174, "uuid": "dcb10edf-3e9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/skyroutecaptivate/crack-Adobe-InDesign-2026/releases/download/new/crack_InDesign_2026_Win64.rar", "Tag": [ { "name": "pw-6624", "colour": "#951b91", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899227, "uuid": "fc12103f-3e9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.203.68:35628/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899228, "uuid": "fc90dedc-3e9f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.230.60:34423/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899289, "uuid": "21159efa-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://baum-z9.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899289, "uuid": "21336928-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MediatorVault/ExpressVPN-Cracked-Version/releases/download/new/Setup_ExpressVPN_PRO-x64.rar", "Tag": [ { "name": "pw-8814", "colour": "#937253", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899294, "uuid": "2422f971-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/VioletWorkerSky/minecraft-vape-v4-download-cracked/releases/download/new/MinecraftVapeV4-x64.rar", "Tag": [ { "name": "pw-9912", "colour": "#fcd0f6", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899356, "uuid": "48cdca0f-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Recordtrablade/Wallpaper-Engine-Cracked-2026/releases/download/new/wallpaperengine-2.7.3-x64.rar", "Tag": [ { "name": "pw-4475", "colour": "#aee191", "exportable": true, "hide_tag": false }, { "name": "rar", "colour": "#0b95a2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899527, "uuid": "ae9d01c8-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.178.91.117:40748/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899593, "uuid": "d6394f4f-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-2x.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899653, "uuid": "fa467c59-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wuaricoco23/WhiteBoxAesCrack/refs/heads/main/fonts/White-Crack-Box-Aes-v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899653, "uuid": "fa47d501-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Shaktiigrover/AutoPassCrack/refs/heads/main/autopasscrack/Auto_Pass_Crack_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899653, "uuid": "fa47e39e-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/wuaricoco23/valentine/refs/heads/main/effortful/Software-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899654, "uuid": "fa58160f-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Shaktiigrover/AutoPassCrack/raw/refs/heads/main/autopasscrack/Auto_Pass_Crack_v3.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899654, "uuid": "fa582ad0-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wuaricoco23/WhiteBoxAesCrack/raw/refs/heads/main/fonts/White-Crack-Box-Aes-v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899654, "uuid": "fa5a3a05-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Shaktiigrover/shakti-site/refs/heads/main/unseclusive/site_shakti_1.5-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899654, "uuid": "fa636210-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Shaktiigrover/shakti-site/raw/refs/heads/main/unseclusive/site_shakti_1.5-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899654, "uuid": "fa65db0d-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/chotu120/BatCrack/refs/heads/master/internal/cracker/Crack_Bat_v2.8-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899654, "uuid": "fa73f42a-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/chotu120/BatCrack/raw/refs/heads/master/internal/cracker/Crack_Bat_v2.8-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899654, "uuid": "fa8a8c61-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/wuaricoco23/valentine/raw/refs/heads/main/effortful/Software-2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899840, "uuid": "6958c0fc-3ea1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.103.39:44119/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776899953, "uuid": "ad11dbe9-3ea1-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://petit-7.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776900256, "uuid": "61802e62-3ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kalt-m5.infirmary5care.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776900436, "uuid": "cca2f109-3ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.185.57:33520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776900499, "uuid": "f1f7b5e6-3ea2-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.170.237:44613/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776900552, "uuid": "11a5648b-3ea3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-3.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776900727, "uuid": "7a220f6e-3ea3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.249.199.3:53750/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776900913, "uuid": "e919078a-3ea3-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bleu-8k.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776901270, "uuid": "bddbe596-3ea4-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://holz-v1.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776901460, "uuid": "2f038d6b-3ea5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.232.94:60123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776901523, "uuid": "5459e476-3ea5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.170.237:44613/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776901574, "uuid": "7341e5da-3ea5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-9.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776901580, "uuid": "769d2d5e-3ea5-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.175.33:40944/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776901821, "uuid": "06271765-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.68.180:33416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776901934, "uuid": "49510b46-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vert-4m.diet-lanolin.in.net/0d24c91a-8b5e-4f72-9136-735f0b4de1a8/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902000, "uuid": "70f6dd26-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.65.52:39939/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902108, "uuid": "b1870088-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jcalumag19/Hash_crack/refs/heads/main/node_modules/reveal.js/plugin/search/crack_Hash_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902108, "uuid": "b1872489-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jcalumag19/web/refs/heads/main/reticence/Software-uncivilish.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902109, "uuid": "b1bb89da-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jcalumag19/web/raw/refs/heads/main/reticence/Software-uncivilish.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902111, "uuid": "b2fb4e11-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jcalumag19/Hash_crack/raw/refs/heads/main/node_modules/reveal.js/plugin/search/crack_Hash_v3.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902111, "uuid": "b320a398-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jcalumag19/todo/raw/refs/heads/main/eyeberry/Software_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902112, "uuid": "b3908df9-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jcalumag19/vercel/raw/refs/heads/main/methylanthracene/Software_1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902114, "uuid": "b4f6be6b-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Sanfin/jsoncrack.com/raw/refs/heads/main/public/assets/com-jsoncrack-3.3-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902114, "uuid": "b4f7fc36-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jcalumag19/cloudweb/refs/heads/main/unshattered/Software_v3.4-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902114, "uuid": "b4fabc86-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Sanfin/jsoncrack.com/refs/heads/main/public/assets/com-jsoncrack-3.3-beta.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902114, "uuid": "b5082000-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Gamevoid2366/AuthCrack-v8/refs/heads/main/characteristically/Auth-Crack-v-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902114, "uuid": "b5083cae-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jcalumag19/vercel/refs/heads/main/methylanthracene/Software_1.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902114, "uuid": "b51ee04e-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Jcalumag19/todo/refs/heads/main/eyeberry/Software_v3.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902115, "uuid": "b53b7e27-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Gamevoid2366/AuthCrack-v8/raw/refs/heads/main/characteristically/Auth-Crack-v-2.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902115, "uuid": "b5ba2026-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/oualiide/ManageEngine-Desktop-Central-Crack/raw/refs/heads/master/ectocondyloid/Central-Crack-Desktop-Manage-Engine-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902115, "uuid": "b5ba2826-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Jcalumag19/cloudweb/raw/refs/heads/main/unshattered/Software_v3.4-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902116, "uuid": "b5d3aeca-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/oualiide/ManageEngine-Desktop-Central-Crack/refs/heads/master/ectocondyloid/Central-Crack-Desktop-Manage-Engine-v2.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902172, "uuid": "d7416bee-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wind-3.diet-lanolin.in.net/05fe317c-0981-4de2-bc8a-930d369db441/ck-3d80df5d12cdfe6450a782fc87bf66b444.google", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902303, "uuid": "25b280ac-3ea7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.117.104.247:51399/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1776902305, "uuid": "267b9cc1-3ea7-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.211.139:44685/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895325, "uuid": "e64fd1d7-3e96-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "0dszydja.wi9sorin.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776900725, "uuid": "78b57f75-3ea3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.249.199.3", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893407, "uuid": "6ef12c36-3e92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.89.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845945, "uuid": "ed8429f1-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.187.36.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776868624, "uuid": "bb57deba-3e58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.224.12.254", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834125, "uuid": "683ccb93-3e08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.136.230", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833526, "uuid": "034f76b2-3e07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.99.48", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882391, "uuid": "c935ba13-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.173.143.107", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776890523, "uuid": "b7f9991b-3e8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "108.57.48.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846006, "uuid": "11f122ed-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.249.250.99", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776870125, "uuid": "39c37079-3e5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.247.155.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776840785, "uuid": "ea201a60-3e17-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.247.238.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820324, "uuid": "464ee5f7-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.221.27.21", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873007, "uuid": "ef795075-3e62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.88.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841326, "uuid": "2c471468-3e19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.100.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776878424, "uuid": "8c7a98ef-3e6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.219.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f456eb-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.58.211.33", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841087, "uuid": "9dbe6bc4-3e18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.239.210.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838926, "uuid": "961d64a7-3e13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.11.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846064, "uuid": "346e11a8-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.109.82", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776852664, "uuid": "9261ee4e-3e33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.229.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826506, "uuid": "ab1a1eeb-3df6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.29.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826384, "uuid": "627e649d-3df6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.82.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845885, "uuid": "c9d81154-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.192.148", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776869885, "uuid": "aaa30d49-3e5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.201.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846006, "uuid": "11f31961-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.172.6", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776869706, "uuid": "40099b31-3e5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.54.183.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845885, "uuid": "c9d85c24-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.158.4", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776839165, "uuid": "24559b71-3e14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.234.46", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f3e88a-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.241.116", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776884225, "uuid": "0df2fe50-3e7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.6.145", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f6e040-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.159.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848825, "uuid": "a1f478da-3e2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.205.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825125, "uuid": "74020c98-3df3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.91.44", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879906, "uuid": "ffe17f3b-3e72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.93.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776900425, "uuid": "c609ddfe-3ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.185.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841025, "uuid": "78c68592-3e18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.42.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776866706, "uuid": "43f06e76-3e54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.138.223.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776872524, "uuid": "cfdcfc20-3e61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.140.160.76", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846006, "uuid": "11f19ca4-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.245.139.161", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845885, "uuid": "c9d98a11-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.254.120.77", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844384, "uuid": "4b3d9268-3e20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.110.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847024, "uuid": "70e1d202-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.107.44.190", "Tag": [ { "name": "118-107-44-190-8080", "colour": "#cd3d4b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RustDesk", "colour": "#d474e9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846965, "uuid": "4d4beddc-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.107.44.213", "Tag": [ { "name": "118-107-44-213-8080", "colour": "#279771", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RustDesk", "colour": "#d474e9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846845, "uuid": "05e7f965-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.107.44.253", "Tag": [ { "name": "118-107-44-253-8080", "colour": "#2567d7", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RustDesk", "colour": "#d474e9", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776894064, "uuid": "f6987e0e-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.113.187.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776835744, "uuid": "2d86d9e8-3e0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.115.148.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776902286, "uuid": "1b25fa8f-3ea7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.104.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846726, "uuid": "bf17274a-3e25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.117.177.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879906, "uuid": "ffe0fe84-3e72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.118.46.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893886, "uuid": "8c53902f-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.119.176.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776898025, "uuid": "2fe0ef98-3e9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.178.91.117", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846006, "uuid": "11f060aa-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.37.212.103", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883565, "uuid": "84d04bb3-3e7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.10.36.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776849544, "uuid": "4eddce4e-3e2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.172.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776822064, "uuid": "53417e5e-3dec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.30.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776854225, "uuid": "34cc5644-3e37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.131.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776866824, "uuid": "8a7e915f-3e54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.32.208", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776866824, "uuid": "8a7ef641-3e54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.183.196.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846006, "uuid": "11f2a484-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.191.47.203", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845885, "uuid": "c9da16de-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.233.121", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845885, "uuid": "c9d89813-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.152.174", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776829807, "uuid": "5a7ca4ed-3dfe-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.135.177.57", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776862325, "uuid": "10d7e64a-3e4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.171.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848045, "uuid": "d10ff3e0-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.113.148.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776887825, "uuid": "6ff36038-3e85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.122.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848224, "uuid": "3bf9e7af-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.220.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776866706, "uuid": "43f06afb-3e54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "140.237.36.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846845, "uuid": "05e83150-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.31.236.60", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bat", "colour": "#607e08", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "MarkGramStealer", "colour": "#b804dc", "exportable": true, "hide_tag": false }, { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847806, "uuid": "42c6d926-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.91.86.92", "Tag": [ { "name": "144-91-86-92", "colour": "#b31787", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882606, "uuid": "490be140-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.208.60", "Tag": [ { "name": "158-94-208-60", "colour": "#741d69", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883985, "uuid": "7f4f5d06-3e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.210.217", "Tag": [ { "name": "158-94-210-217", "colour": "#767df6", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776861544, "uuid": "3f8933d7-3e48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.177.21.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845945, "uuid": "ed84440b-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.37.151.8", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886085, "uuid": "62da4bf7-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.38.79.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846064, "uuid": "346d10b5-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.108.139", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838025, "uuid": "7d10a7a8-3e11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.174.105.183", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825484, "uuid": "4a1db890-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.132.117", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877024, "uuid": "49f00387-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.104", "Tag": [ { "name": "176-65-139-104", "colour": "#a00416", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875884, "uuid": "a2ce87e2-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.131", "Tag": [ { "name": "176-65-139-131", "colour": "#72b86e", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879965, "uuid": "22cadde1-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.146", "Tag": [ { "name": "176-65-139-146", "colour": "#6c9f0b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876364, "uuid": "c0de36db-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.69", "Tag": [ { "name": "176-65-139-69", "colour": "#63e6f2", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873545, "uuid": "3035fd85-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.94", "Tag": [ { "name": "176-65-139-94", "colour": "#5d4e7f", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893345, "uuid": "49d78ba0-3e92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.245.46.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876845, "uuid": "df51e65f-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.224.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776817384, "uuid": "6e16a727-3de1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.252.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776849005, "uuid": "0da7ea83-3e2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.41.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776885125, "uuid": "267cf252-3e7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.48.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845945, "uuid": "ed829d37-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.119.193", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842647, "uuid": "3fd45b7b-3e1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.79.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776866644, "uuid": "1efbb977-3e54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.5.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776829084, "uuid": "abccd3ee-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.99.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776854225, "uuid": "34ccccfc-3e37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.229.22", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776899225, "uuid": "fad385b5-3e9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.230.60", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776897424, "uuid": "c95ad10c-3e9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.234.138", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844624, "uuid": "da5a1670-3e20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.180.160", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876245, "uuid": "79850b10-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.13.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776831605, "uuid": "8a756169-3e02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.174.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846126, "uuid": "596c3220-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.175.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f416cb-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.125.60.152", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776897424, "uuid": "c95ac785-3e9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.203.68", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851164, "uuid": "14361fae-3e30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.246.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f1ffa5-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.6.252", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816065, "uuid": "5b8187d4-3dde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.243.8.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776854225, "uuid": "34cc6974-3e37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.188.116.140", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828006, "uuid": "293ee5c6-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.58.197.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856385, "uuid": "3c48ebff-3e3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "192.3.176.245", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f26fd8-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.163.187.71", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776885964, "uuid": "1a772550-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "195.238.123.165", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776864124, "uuid": "40fb4a03-3e4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "1ayo-port.infirmary5care.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776859864, "uuid": "55d4929f-3e44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "203.101.181.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776829385, "uuid": "5ed02331-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.135.170.3", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776840365, "uuid": "ef9751a3-3e16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "206.245.165.5", "Tag": [ { "name": "206-245-165-5", "colour": "#e4e316", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845885, "uuid": "c9d81ff5-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "218.59.82.22", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846064, "uuid": "346de6d1-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.215.220", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776823025, "uuid": "8fdd0178-3dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.7.209", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776881945, "uuid": "bf4111cb-3e77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.199.194.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f2367a-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.227.255.138", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843785, "uuid": "e636dada-3e1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.95.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846064, "uuid": "346ce232-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.138.149.73", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845945, "uuid": "ed846e0d-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.180.110", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776862505, "uuid": "7bf344e9-3e4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.24.255", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776823808, "uuid": "62eee3eb-3df0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.254.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845945, "uuid": "ed85f98e-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.110.97", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856445, "uuid": "600c8403-3e3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.216.119", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776890645, "uuid": "00fdb57f-3e8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "2yxdgkw7.kymle7rax.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f42085-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.76.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776888845, "uuid": "cfafb927-3e87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.77.224.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820745, "uuid": "41655d66-3de9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.80.140.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848045, "uuid": "d1104ded-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.76.199.154", "Tag": [ { "name": "38-76-199-154-8888", "colour": "#84767c", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "ConnectBack", "colour": "#4be568", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776823025, "uuid": "8fdad2c8-3dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.65.75.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776858784, "uuid": "d250fc5d-3e41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.73.164.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776852606, "uuid": "6fc0e330-3e33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.33.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776835086, "uuid": "a525a35e-3e0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.78.95.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845885, "uuid": "c9d6db9d-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.79.136.154", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776861127, "uuid": "46d4a1bb-3e47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "3jms0.protocave.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893284, "uuid": "25ee4899-3e92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.178.153.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844745, "uuid": "2272a5f1-3e21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.199.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843425, "uuid": "0fc306fd-3e1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.204.113", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845345, "uuid": "880a742c-3e22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.7.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f2c1d1-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.129.254", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776831424, "uuid": "1e4b8425-3e02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.197.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845945, "uuid": "ed840c69-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.25.185", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834007, "uuid": "22025469-3e08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.46.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845885, "uuid": "c9d773e4-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.210.132", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846006, "uuid": "11f19fa1-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.38.235", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776892144, "uuid": "7e5f9e14-3e8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.92.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841326, "uuid": "2c46e955-3e19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.161.3", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882125, "uuid": "2a6f3869-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.54.204", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828065, "uuid": "4bf59215-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.162.76", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f29ef5-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.110.98", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845885, "uuid": "c9d81156-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.226.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846006, "uuid": "11f15c20-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.26.29", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776822007, "uuid": "3176edd6-3dec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.250.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826205, "uuid": "f7b74a54-3df5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.69.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882007, "uuid": "e43a3b4e-3e77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.213.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856025, "uuid": "65bf6164-3e3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.87.229.177", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844624, "uuid": "da5a1b10-3e20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.151.182.40", "Tag": [ { "name": "46-151-182-40", "colour": "#f1fdea", "exportable": true, "hide_tag": false }, { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843844, "uuid": "09324e58-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.151.182.76", "Tag": [ { "name": "46-151-182-76", "colour": "#253b4c", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860525, "uuid": "df9bd44d-3e45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.99.251.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846006, "uuid": "11f1eab8-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.215.185.216", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776869406, "uuid": "8d411919-3e5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "4t0mi-core.credibil-debauch.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820445, "uuid": "8e8e7d5e-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5.134.246.21", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847806, "uuid": "42c3b754-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "54.36.117.71", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776888306, "uuid": "8e890d2a-3e86-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "5565wep5.sylov3er.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846064, "uuid": "346bc9d9-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.253.129.91", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846006, "uuid": "11f12487-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.47.120.129", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841924, "uuid": "9106012e-3e1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.60.77.123", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820924, "uuid": "ac1b495e-3de9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.209.76.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851645, "uuid": "32e2293d-3e31-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.211.45.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776871386, "uuid": "29adc1e8-3e5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.211.56.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776880324, "uuid": "f8ce3d6c-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.234.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886145, "uuid": "865ce144-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.237.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f250a2-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.197.182", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851345, "uuid": "8036ba05-3e30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.60.224", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776831967, "uuid": "61d00f8c-3e03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.151.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845825, "uuid": "a5f37448-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.72.30", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776889386, "uuid": "1261fd36-3e89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.73.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843065, "uuid": "390669fa-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.160.11", "Tag": [ { "name": "64-89-160-11", "colour": "#386eda", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776858184, "uuid": "6c648036-3e40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6tn0i.cloafade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856145, "uuid": "ad790c30-3e3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "6xsj.wentreck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873545, "uuid": "305bfa0a-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "717mupv.idol-worship.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776829444, "uuid": "821c7c36-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "72.255.19.83", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776829385, "uuid": "5ed0196a-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "72.255.33.219", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893345, "uuid": "49f71a94-3e92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "730e.po4vaxel.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847806, "uuid": "42c55dff-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.68.99.77", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841865, "uuid": "6d71b8d6-3e1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.142.209.13", "Tag": [ { "name": "83-142-209-13-8080", "colour": "#67624f", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837366, "uuid": "f3ce76c3-3e0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.232.53.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886986, "uuid": "7b97d1d5-3e83-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "8rxhman.sylov3er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874385, "uuid": "24d3e56a-3e66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9871mi.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776868386, "uuid": "2d1f178a-3e58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "9rg153d.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879670, "uuid": "732eec78-3e72-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "a0uq.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842285, "uuid": "682cbf91-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "acbcr.ro" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776864424, "uuid": "f405eaf7-3e4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "activeserver.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776871085, "uuid": "75ec73aa-3e5e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "agentdel.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776891607, "uuid": "3e1a4184-3e8e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arknex6or.kymle7rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776887284, "uuid": "2dc124ec-3e84-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "arktidear7.sylov3er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776861485, "uuid": "1c31c41e-3e48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ays2jm.protocave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776878056, "uuid": "b1085204-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "azureaud.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776823206, "uuid": "fc244721-3dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "backy-ard5.cr2pskiing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843251, "uuid": "a7cbb608-3e1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "backy-ard5.po3vaxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776899285, "uuid": "1eedec30-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "baum-z9.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776829566, "uuid": "cb1fd138-3dfd-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-lo-ok6.arena-plug.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776849544, "uuid": "4eea43dd-3e2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-look6.bovla5xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776824226, "uuid": "5be89926-3df1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-ti-me2.eighth-swollen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844212, "uuid": "e4c9bb0f-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "best-ti-me2.kymle9rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816610, "uuid": "a0c89fc4-3ddf-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigwall3.aperitif-form.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837306, "uuid": "d0734bec-3e0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bigwall5.ra4xilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776827884, "uuid": "e07544ce-3df9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "black-h-at1.arena-plug.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847865, "uuid": "65db8564-3e28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "black-hat1.bovla5xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776900906, "uuid": "e51950ae-3ea3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bleu-8k.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833951, "uuid": "00638adb-3e08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blue-box1.6zoremax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776884345, "uuid": "55f470d9-3e7d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blzlet.5zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820025, "uuid": "9422aef7-3de7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-sk-y1.basis-embankment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776839945, "uuid": "f586c075-3e15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-sky1.to7virel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776866465, "uuid": "b4369007-3e53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brookprime.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893945, "uuid": "b00612fc-3e93-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "build-bio.po4vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883386, "uuid": "19fdbc39-3e7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "c1ini-phase.5zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776880385, "uuid": "1d226ef7-3e74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cach8-stack.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882397, "uuid": "cc775e7e-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cargoisle.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876131, "uuid": "35eb32f4-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cinemapassive.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776822305, "uuid": "e337393d-3dec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-wa-lk2.cr2pskiing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842227, "uuid": "4525f466-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-wa-lk2.po3vaxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776830645, "uuid": "4dbda799-3e00-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clear-sky3.sin8lebreasted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850687, "uuid": "f81d16ff-3e2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clearsky3.zom2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776835272, "uuid": "140d5fa1-3e0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "clearview5.6zoremax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776880031, "uuid": "4a219ed5-3e73-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cliffcrims.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776871685, "uuid": "dbea7e7f-3e5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "co1o-grid.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776898630, "uuid": "98763410-3e9e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-1q.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776830950, "uuid": "03877f7e-3e01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-sn-ow4.sin8lebreasted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850986, "uuid": "a9e80b8e-3e2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-snow4.zom2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776836945, "uuid": "f95512d3-3e0e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldwa-ter4.ra4xilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776817267, "uuid": "28011609-3de1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldwa-ter5.aperitif-form.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847330, "uuid": "2742f0b9-3e27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-mi-lk5.de1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776819246, "uuid": "c363ddcf-3de5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cool-stone5.jemannik5helma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776827226, "uuid": "57f593c9-3df8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coolmi-lk5.import8ravitate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776839587, "uuid": "1fc2fdd5-3e15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coolstone6.sylom2er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776872045, "uuid": "b21ca096-3e60-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "coremount.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860472, "uuid": "c01f2245-3e45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "corhard.dashjore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776878348, "uuid": "5f6032c3-3e6f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cxti.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776901566, "uuid": "6e0c331e-3ea5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-9.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820205, "uuid": "ff8a4aa5-3de7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-ni-ght2.basis-embankment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776840246, "uuid": "a8696b4a-3e16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "darknight2.to7virel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883687, "uuid": "cdaba411-3e7b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "darktermi.5zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874384, "uuid": "24b9ee32-3e66-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "datasurge-bot.online" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820565, "uuid": "d6072832-3de8-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-ocean3.basis-embankment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776840845, "uuid": "0de35b00-3e18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-ocean3.to7virel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776889985, "uuid": "775d75dc-3e8a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "defenvoya.to2virex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776864786, "uuid": "cbbdcc28-3e4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dmnoyvf.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882066, "uuid": "072c60ec-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dn17wscb.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856451, "uuid": "634dc463-3e3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynlineal8.wentreck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776868746, "uuid": "03d5b44e-3e59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynlith7os.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825547, "uuid": "6f3077c5-3df4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easy-ta-sk6.eighth-swollen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845711, "uuid": "62020e73-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "easy-task6.kymle9rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776857169, "uuid": "0f9af3eb-3e3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "echocanopy.cloafade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832990, "uuid": "c3e4175e-3e05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "empty-s-pac4.buckishing-out.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776853025, "uuid": "697ffc7a-3e34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "empty-space4.wi8sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776885065, "uuid": "02c42e20-3e7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "eufkpp.ra8ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874144, "uuid": "95a98134-3e65-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "f0rm-mount.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776885307, "uuid": "934b14a0-3e7f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "faithfulvector.ra8ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776888965, "uuid": "1743bdda-3e88-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fall-ridg.to2virex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776899591, "uuid": "d5088634-3ea0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-2x.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834610, "uuid": "899f8424-3e09-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastrun3.6zoremax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776881707, "uuid": "31694ab7-3e77-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fierce-frame.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876370, "uuid": "c42ac9e4-3e6a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fkftn4.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776892988, "uuid": "751204e5-3e91-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flee-line.po4vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886625, "uuid": "a4d82e5b-3e82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "flkqe.sylov3er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879431, "uuid": "e4767b99-3e71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "forg-scann.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776868085, "uuid": "7a37dae3-3e57-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fre1ght-mark.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776818165, "uuid": "3f8f78b1-3de3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-app-l1.jemannik5helma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847145, "uuid": "b9069d23-3e26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-tea4.de1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826925, "uuid": "a4719d8f-3df7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fresh-tea4.import8ravitate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838569, "uuid": "c10b0b16-3e12-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshmilk3.sylom2er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832685, "uuid": "0dbb319b-3e05-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "full-b-ox3.buckishing-out.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842948, "uuid": "f3574a46-3e1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "full-room4.po3vaxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776852666, "uuid": "93ae424f-3e33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fullbox3.wi8sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776822847, "uuid": "261c2236-3dee-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fullr-oom4.cr2pskiing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776855071, "uuid": "2ced2d7a-3e39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "genom-node.wentreck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776894306, "uuid": "87035959-3e94-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "geo-pol4r.po4vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776863465, "uuid": "b7fba949-3e4c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gfpb.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876789, "uuid": "be0d8095-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glossink.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841027, "uuid": "7a3745b8-3e18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gold-fish4.to7virel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776820865, "uuid": "888c36e3-3de9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldfi-sh4.basis-embankment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776823927, "uuid": "a9eef22c-3df0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-n-ews1.eighth-swollen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843910, "uuid": "30928d59-3e1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "good-news1.kymle9rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776888663, "uuid": "63ba84b2-3e87-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr1d1-vector.to2virex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886385, "uuid": "158a3bcc-3e82-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr4nd-vault.ra8ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834312, "uuid": "d773d9a5-3e08-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gre-enleaf2.6zoremax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882726, "uuid": "90d13cef-3e79-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gufnz2.5zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776889566, "uuid": "7d828c1f-3e89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hauinn.to2virex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776898269, "uuid": "c108acc1-3e9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haul-cache.de6xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776855484, "uuid": "23782663-3e3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "haul-sheet.wentreck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776831967, "uuid": "61de7a81-3e03-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-lo-ad1.buckishing-out.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776852007, "uuid": "0ab9abac-3e32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-load1.wi8sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776896706, "uuid": "1d8fa3ee-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heicn.wi9sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776835631, "uuid": "e9a4fc7b-3e0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hight-ree6.6zoremax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776855312, "uuid": "bcc3affb-3e39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hillrain.wentreck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776901267, "uuid": "bc1e1e8a-3ea4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "holz-v1.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826508, "uuid": "ac638a7c-3df6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-s-oup3.import8ravitate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846609, "uuid": "795aaa72-3e25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-soup3.de1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838987, "uuid": "ba7ba9ca-3e13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hot-tea4.sylom2er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776818585, "uuid": "39c51229-3de4-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hottea3.jemannik5helma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776885725, "uuid": "8c22795f-3e80-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hubspruc.ra8ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776892685, "uuid": "c0b24fd3-3e90-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-5ystem.po4vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776867425, "uuid": "f06d97c7-3e55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ifzyk85.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860826, "uuid": "93126c39-3e46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "inde-fer.protocave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842285, "uuid": "68116fec-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "indexsearchfindresult.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875765, "uuid": "5b9bc5e7-3e69-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "indexwho.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776878056, "uuid": "b0efd3b4-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "iz7v.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776876486, "uuid": "095fd15a-3e6b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "jbrj92scltrbtv7mzejvmovw.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845470, "uuid": "d241b961-3e22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "just-ta-lk5.kymle9rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825187, "uuid": "98927a47-3df3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "justta-lk5.eighth-swollen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776900253, "uuid": "5f8239fd-3ea2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kalt-m5.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776858785, "uuid": "d28e7b57-3e41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ke3srk.dashjore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873725, "uuid": "9ba0b73e-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kernalstress.st" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776892325, "uuid": "ea1f0145-3e8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kpelhw.kymle7rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776831726, "uuid": "d218fe86-3e02-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-mo-on6.sin8lebreasted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851646, "uuid": "3384153e-3e31-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lightmoon6.zom2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776832325, "uuid": "3756ee6e-3e04-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lightp-ack2.buckishing-out.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776852307, "uuid": "bd57f226-3e32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lightp-ack2.wi8sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776890345, "uuid": "4e195ebe-3e8b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "link6-switch.to2virex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882392, "uuid": "c964ecfd-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lkgkdsjd.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776859208, "uuid": "cee5e328-3e42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loc46-cache.dashjore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828546, "uuid": "6abb494d-3dfb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-be-lt3.arena-plug.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848583, "uuid": "122f44e4-3e2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "long-belt3.bovla5xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776854591, "uuid": "0ecbbf55-3e38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lopamp4.6zoremax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776881045, "uuid": "a6eac735-3e75-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lqfrhvos.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776891006, "uuid": "d7bca081-3e8c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumdraal1.kymle7rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776891965, "uuid": "138cacb0-3e8f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "m3rg-watch.kymle7rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877150, "uuid": "953b1e75-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "madroxreborn.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833766, "uuid": "920455e5-3e07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-po-int6.buckishing-out.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776853685, "uuid": "f2d30776-3e35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-point6.wi8sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776857529, "uuid": "e65ae984-3e3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "majorrapid.cloafade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776870064, "uuid": "15d14324-3e5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-1ce.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776866045, "uuid": "ba0bc16a-3e52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "minor-mon.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776874808, "uuid": "21189ce9-3e67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mme4po.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776897308, "uuid": "84695a3b-3e9b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mxt0kl.de6xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873306, "uuid": "a21b5d3c-3e63-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "n0de6-node.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776858547, "uuid": "45138bf6-3e41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "neo-s1at.cloafade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776837671, "uuid": "a9e38ff9-3e10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-page6.ra4xilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776849244, "uuid": "9c0bb581-3e2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-style5.bovla5xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816964, "uuid": "73cc2bda-3de0-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "new-vi-ew4.aperitif-form.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776829205, "uuid": "f3c1344b-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "newst-yle5.arena-plug.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776822606, "uuid": "9656a49c-3ded-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "next-door3.cr2pskiing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842593, "uuid": "1f7167ed-3e1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nextdoor3.po3vaxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776824825, "uuid": "c135bb91-3df2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nice-sh-ot4.eighth-swollen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844926, "uuid": "8e15e39b-3e21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nice-shot4.kymle9rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776898930, "uuid": "4ac762f1-3e9f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "noir-4.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776894667, "uuid": "5e63973b-3e95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "norlineis.wi9sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776889745, "uuid": "e8143cd7-3e89-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "offharves.to2virex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776819844, "uuid": "285b7864-3de7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "old-ca-se6.jemannik5helma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776835986, "uuid": "bd79ecf3-3e0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-book1.ra4xilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776884647, "uuid": "09f54730-3e7e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "oxhlrfs.ra8ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776896945, "uuid": "aba37575-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "p68x.de6xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776878056, "uuid": "b10a469c-3e6e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "parcelmod.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776899951, "uuid": "ab5fcb81-3ea1-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "petit-7.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776897970, "uuid": "0ea4779e-3e9d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pin30-sync.de6xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776881408, "uuid": "7ef545ca-3e76-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pkqwqx.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776872764, "uuid": "5eaa751f-3e62-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "polatren.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776887645, "uuid": "04c144f3-3e85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "portal-enc.sylov3er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776870664, "uuid": "7b3a3aed-3e5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "primeambe.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776895566, "uuid": "763b4083-3e97-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-5h4d.wi9sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776827584, "uuid": "2db75eeb-3df9-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "purewa-ter6.import8ravitate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776847566, "uuid": "b3740000-3e27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "purewater6.de1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776856806, "uuid": "375639b9-3e3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pyj8st.cloafade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776873725, "uuid": "9b99265d-3e64-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quarryhaul.idol-worship.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776833591, "uuid": "29ca6d92-3e07-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickmo-ve5.buckishing-out.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776853328, "uuid": "1dea11f3-3e35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickmove5.wi8sorel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776861787, "uuid": "d031523a-3e48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "quotaraven.protocave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776830284, "uuid": "76de3331-3dff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rainy-ni-ght2.sin8lebreasted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850327, "uuid": "21681b64-3e2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rainy-ni-ght2.zom2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776824525, "uuid": "0e703cbd-3df2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "real-fact3.eighth-swollen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776844629, "uuid": "dd285390-3e20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "realfact3.kymle9rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776836650, "uuid": "497453ba-3e0e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "red-mark3.ra4xilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776817685, "uuid": "211f0a79-3de2-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "redbook6.aperitif-form.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776870427, "uuid": "ee0745e7-3e5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "revlogi.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776855851, "uuid": "fe1aafa8-3e3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rl3xewp1.wentreck.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776869706, "uuid": "405196ca-3e5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rnoun3-mesh.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776867724, "uuid": "a30117e3-3e56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sapdecode.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776862085, "uuid": "81b06d07-3e49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sc4nn-point.protocave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776897665, "uuid": "591dbdcb-3e9c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scamanif.de6xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776877091, "uuid": "71b0f9b9-3e6c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scann1-cast.blackbirdr0ot.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776872345, "uuid": "650fa652-3e61-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sernex1al.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875104, "uuid": "d1f05099-3e67-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ship-obser.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776823625, "uuid": "f5a4438c-3def-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "side-vi-ew6.cr2pskiing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776843670, "uuid": "a1774392-3e1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sideview6.po3vaxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776821586, "uuid": "369ab636-3deb-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "silver-ra-in6.basis-embankment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841564, "uuid": "ba5e2c29-3e19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "silverrain6.to7virel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776859806, "uuid": "33518b53-3e44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "skuj.dashjore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776834966, "uuid": "5d40da50-3e0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-lamp4.6zoremax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776863106, "uuid": "e273d0d1-3e4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "snowsketc.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776816311, "uuid": "ee3f362f-3dde-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "soft-cha-ir2.aperitif-form.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776836285, "uuid": "6fedddd0-3e0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "softwind2.ra4xilen.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776871446, "uuid": "4d4585b7-3e5f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "solforge2ar.greecesco7es.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776862806, "uuid": "2f329912-3e4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sort5-logic.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776865445, "uuid": "547782ac-3e51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "split-pulse.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776894907, "uuid": "ed334ff8-3e95-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-sal3s.wi9sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776891306, "uuid": "8ae3fb77-3e8d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "summit1-stream.kymle7rax.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776830110, "uuid": "0f682256-3dff-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunny-d-ay1.sin8lebreasted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776850027, "uuid": "6e534232-3e2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sunny-day1.zom2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776846247, "uuid": "a1c82dc0-3e24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-bun2.de1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826205, "uuid": "f7bd4dfa-3df5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-bun2.import8ravitate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776818347, "uuid": "ab9ecb5f-3de3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-bun2.jemannik5helma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838325, "uuid": "2ff17d7b-3e12-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweet-pear2.sylom2er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776893645, "uuid": "fd0e858a-3e92-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "switc1-index.po4vaxel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776880685, "uuid": "cfe795af-3e74-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "t1ny-spool.svolota-player.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776854045, "uuid": "c97babc2-3e36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tarra4.de1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776825906, "uuid": "4584fa10-3df5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-pi-e1.import8ravitate.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776845891, "uuid": "cd2800df-3e23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tasty-pie1.de1xorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776838085, "uuid": "a0d8fdd3-3e11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tastyapple1.sylom2er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776867065, "uuid": "19f9959f-3e55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tensorextrac.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776875407, "uuid": "86126f07-3e68-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ter8k.multi-machine.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776879130, "uuid": "314dfebb-3e71-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thorneur.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776821946, "uuid": "0d0b449d-3dec-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-f-loor1.cr2pskiing.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841924, "uuid": "91194e43-3e1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-floor1.po3vaxil.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776863765, "uuid": "6b396a34-3e4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-markis.infirmary5care.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776869113, "uuid": "dea5c098-3e59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "trusbyt.credibil-debauch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776866824, "uuid": "8aa958bc-3e54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tzlajh.decay5obes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776888005, "uuid": "db869e4e-3e85-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ultra-c4ny0n.sylov3er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776896706, "uuid": "1d790d76-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "value-quota.wi9sorin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776882391, "uuid": "c9456882-3e78-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vanillamods.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776842291, "uuid": "6b50eddf-3e1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vasijl-cloud.b-cdn.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776896706, "uuid": "1da05494-3e9a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaul2-sheet.de6xamel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776857766, "uuid": "7371b829-3e3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "velvepastu.cloafade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776901930, "uuid": "4761aaec-3ea6-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vert-4m.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883986, "uuid": "7f71c63d-3e7c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "visualpure.5zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776878711, "uuid": "3780b5f8-3e70-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorlithum.histor5corching.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828845, "uuid": "1cede4f7-3dfc-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-co-at4.arena-plug.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848827, "uuid": "a354c343-3e2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-co-at4.bovla5xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776851345, "uuid": "803f50d8-3e30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-fi-re5.zom2lirex.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776818944, "uuid": "0feb1f4b-3de5-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-m-ilk4.jemannik5helma.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776839290, "uuid": "6eb707f3-3e14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmbr-ead5.sylom2er.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776831306, "uuid": "d810bd73-3e01-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmf-ire5.sin8lebreasted.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776886026, "uuid": "3f6f6880-3e81-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmlunar.ra8ximel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776862445, "uuid": "58648ceb-3e4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmprairie.protocave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776828249, "uuid": "ba06ba66-3dfa-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-shir-t2.arena-plug.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776848230, "uuid": "3f3f3f5c-3e29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "white-shirt2.bovla5xel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776821285, "uuid": "830506ad-3dea-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "whitecl-oud5.basis-embankment.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776841266, "uuid": "087d9f2a-3e19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "whitecl-oud5.to7virel.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776900550, "uuid": "1064a962-3ea3-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wind-3.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776859446, "uuid": "5cb13134-3e43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wpckch.dashjore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776865085, "uuid": "7e255d1c-3e50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xg6xtld1.diet-lanolin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776826807, "uuid": "5e2424bd-3df7-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xs.bhaaratkeeshakti.vip" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776883026, "uuid": "434264fc-3e7a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yjbkbpa.5zorelin.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776860165, "uuid": "094e9649-3e45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zencrest8et.dashjore.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1776865809, "uuid": "2d680d00-3e52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "zxvy.diet-lanolin.in.net" } ] } }