{ "Event": { "published": true, "date": "2026-03-30", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-30", "timestamp": 1774916122, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "b45a69f3-8fdb-4dff-a9b1-3ecb50f64a16", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1774829358, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774829358, "uuid": "faa97edb-8805-4b63-96fd-c7df7886e0a7", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774829358, "uuid": "510e7ef7-3e77-4efd-a1f1-537811704910", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774829358, "uuid": "1726eca7-1fd1-49e1-a0a6-308d54de68dd", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774829358, "uuid": "1ae45285-4c96-4802-8881-242316f8364f", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774829358, "uuid": "810f61df-0917-4239-bf5d-8b86376d89d8", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0781e50-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "19d94869-02a2-44f7-84bf-ecbe5823f2a8", "comment": "Malware payload (Mirai)", "value": "23ff7f6d28bbfcb654e867a730a95aca", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "2a2f28e1-240f-49cb-a274-eba4a3a9de65", "comment": "Malware payload (Mirai)", "value": "95b5c0afbdea19f217e1d7d1c6ed85fda40d07e0ae90e089b5d872310b465ac1", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "da0c13dc-0013-4fce-b6b5-0fb0d04c8b3e", "value": "T120B2E054B9A3B572C271B53381AC4285B2D6077CF5B733630520577E399D04A2BBC9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "4ec999b7-3669-4843-b469-2d7ae4c4be67", "value": "768:O3E/rkitIElffwEsXz6GdSsrrYs3UozMf9v:GEwqIETsXe6SsrrNzA9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "1a6788f9-b899-4f6d-8e1a-5e8a94e89cbd", "value": 25112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "a39b7193-afb0-42b9-8a8f-8688647ccced", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0794412-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "4df2f782-2c88-42d8-8a5b-abe17a763a82", "comment": "Malware payload (Mirai)", "value": "0d07f8200d748176ccc7d23ef31915b1", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "f646791f-053a-483b-b60f-41c0bd8f8fa0", "comment": "Malware payload (Mirai)", "value": "63b36d9e77a05e324ce805274ef6c173dac5fd5043ecb52977e479a62c9f085e", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "c3098be7-4624-4863-a015-43afe5535d68", "value": "T1C113F2904EE8BD36D1500D79C96A0CCA1F4DF7F84AE77629097BC5A887C31C791E76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "140b7762-1c7d-4176-97f3-f509d3d93c80", "value": "768:jrzD+GhbCRAjFUvKF5ncFN9gNFKHR5zJHQ21Cmh/d2HI9x+5x9q3UEL3z:jvDzbCaGoch5Fh1pd1x+5kLj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "561bc8d2-5e1d-41d7-96c3-0704c8d21b47", "value": 44780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "7ee4df5f-0b6e-4a1b-9e8f-ef92239ca55b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f07a1ed5-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "3cc09597-b6cd-41f0-a65d-e36abf107dfc", "comment": "Malware payload (Mirai)", "value": "3edc9719407ba5071612649c37f6b28b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "f93cebc4-202e-4ba6-8641-6f819e13a9fa", "comment": "Malware payload (Mirai)", "value": "4b26846adb2ac4e7f5a17e7da697a36611b080ac77702ac3290faef6c8353b57", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "c0ed8c32-a5c9-4eba-83e6-cb32dc7127e6", "value": "T192630235418734C2C7120A35C9C8C4D6BE1C2AFDA5BEA9878DB9C96C2267644BFB4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "8bf4c5bb-4a7c-443c-942d-e449a0a9b01c", "value": "1536:kRMSbdHYEnQfaib05SM7ZAaI8qL/B9kU+09Zi:kCSbJYEnLVjZAa/qLpmU+0zi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "1e13647c-5a4c-4e7f-8ce7-e53fc6c62fe2", "value": 67416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "5f97b18f-fd58-4eb5-ba3a-8c270087d1a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f07a9e7d-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "ad03128e-9798-41cf-b521-2ab182f820b5", "comment": "Malware payload (Mirai)", "value": "f9b8515c61dc4db83bd231b47c190c9e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "5f9a9043-9222-4412-b908-0b889b73a111", "comment": "Malware payload (Mirai)", "value": "d4d1ad2082e114d5ea577a5beaf8c45ae32fbc0cc3c1e02d56f66df9fec85f97", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "38466d77-92a0-43bc-b61c-7276134b2454", "value": "T1F303F1ABC2B2CF8FC3D7677008DEB6AE1518C7A6D2B8A5E56540D0771220BF9F1A47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "10ec7d1e-d137-4b6b-b8c3-784cd4367356", "value": "768:vp8088gzzBUlHT7NgovQrt9xRxB5fcAgaw/2B1LxBxB/I44VCSDdnbcuyD7UHQR7:vpk5dUlFfQr1PX0Axm2XvTGZnouy8Hy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "48b13dbb-6be3-49bc-bb98-5e537f9288c9", "value": 39692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "63066d4a-d8ca-4467-930e-cabd3e08c93b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f07d2fba-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "8022ee6e-b829-4dcc-aee5-70274e5cef10", "comment": "Malware payload (Mirai)", "value": "c265e5b3b1b068874c1734ebca8d4e5c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "ad4b48ce-11a2-4478-b6d1-f4b8fa72659f", "comment": "Malware payload (Mirai)", "value": "5e7cc31353413f298326dd7c39c2831a627b1a83a9c127dd0909038f64f3c679", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "d3d4b2ae-9dff-4622-9e63-89e64167da4b", "value": "T1A403F191E2496C51CF7B9EE054E6ABA6BB650273035A9CB2B4E48F1270B73312915F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "fd95b92c-673a-4527-b406-c305e5cfe88b", "value": "768:hffQ0AgTXpS0GSboKivAj2NZQNZGd4nWip+vFznh7dlg4/AemLycf4uVcqgw09k:JDg0BMKiIjCZiW7xvFxnWLycf4u+qgwx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "c2e22043-981e-4247-ba32-d5b3eaa3b417", "value": 40180, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "5d1e8e30-5707-4b7f-8f98-c6117a129538", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0827265-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "c2af5148-9dc3-4c84-a32f-f06afadea966", "comment": "Malware payload (Mirai)", "value": "2bd7e64561a4e475cc88c9c1a736d454", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "62a6f559-6476-41f0-a19a-ffba2c443c51", "comment": "Malware payload (Mirai)", "value": "9ba6aa186362628c27376cf42e8a6cdbb1b614910e05c87104c77bfa5413bbb7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "dedb967d-ffbf-4a4e-aa1d-426cc61fcd8d", "value": "T13A13F258140AE474DFABC0360B251BF43C7387932111FE49386CEA4EEE76D657903B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "4ca90e7f-6965-4e73-80fc-09b40229cbad", "value": "768:ILD0tMrtiEwV0QKQipwBiozrx3DCCiwrlwl0LLplcF5QMJgGlzDpbuR1J9B:IEmti5+QZmxoZGCV+l0vOdVJuvB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "d3cde712-4f36-493d-b55e-72138f7e8c06", "value": 43232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "5a462cb5-91b6-4e08-9a8e-7f988b51210f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0831b52-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "b32b4032-ba19-42b8-9b70-5991b18ba52f", "comment": "Malware payload (Mirai)", "value": "6dfc7fff6eb8303ebec27a2d5fe9b720", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "808f50ac-cf45-478b-86f1-b644e4256538", "comment": "Malware payload (Mirai)", "value": "12c1e3598ad05e4d26c854e83088746c74851a2b06ea69af8d9c5c2f3d4a5e9f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "d17650bd-efda-40d8-afa5-70fd26e8e9b2", "value": "T10C73AE23C8A61998D25C42B8B170FE3A5763E45056536FF7059BCA7AA047EDCF8093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "8cbbb891-58d1-4726-8971-48d5871c6911", "value": "1536:U/G/lVA7lvz4CXKLKIJjL74QN/VQC9yUxdM7Z:Ue9VUx4CXKuI1J/VQ9OS7Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "c7618e87-cb4a-43ae-bb36-069cbfa47c26", "value": 80384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "703373e4-9e0a-4b3e-8efb-01fb47b10063", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f08439c2-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "35d46b9e-e61f-4f31-8138-32494d8c4235", "comment": "Malware payload (Mirai)", "value": "188de38c6e2c5aa95fd76eb86cfb0bc4", "object_relation": "md5", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "7ece1e88-290c-48c9-91e3-a3f8982f9fb6", "comment": "Malware payload (Mirai)", "value": "ac6fd224364aeabcdda478aa1ac9098955bf22d0c9f58bee9238f116b6734ee8", "object_relation": "sha256", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "547020e1-522b-4cdb-aa6d-ae38d8c0fb4e", "value": "T175C3AE97F78B24A1C86246F007C76B8E3E6362019E6BE9E76C1E753B19390DF19063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "241843c7-a67f-4b36-b143-a84fa0d3b9ff", "value": "1536:H6189r2mIHgqH8INWZzEB4Z+LaLWqhIij5AKBMeFCjxZJOug9P/LWA:a1ur2nj7wzEqZ+Leth5AdeFCcug9Pq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "de50268e-d769-4e74-a7f7-a4c9d5630f44", "value": 124352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "014fe02d-8c53-4207-9142-db6402c370c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f08481f6-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "9ddc0c2b-6227-4e99-802d-a938f2e3608c", "comment": "Malware payload (Mirai)", "value": "31dfdf2f3f0c3f8c612f8635680c31ed", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "8b7fe409-116c-44f8-be1a-ca0f2e28a654", "comment": "Malware payload (Mirai)", "value": "530c362961621cd44eef36f02bcd6ab5d1fe45e78a883686b53aa2be7fb3456c", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "e9866942-d649-45e9-b898-4fcba4ba7bb4", "value": "T13D13F1F371277C315AF058F4DBE800011A335BBABB653DA78BA0422F67952EA38F05", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "daf7624d-a484-47e6-b8be-c4e2f623e1c8", "value": "768:F7oU/wnvDrWgtOlcv65hzwL6JXfviUGhIGAu5uYg6rPYGSbbxs3Uozcg:5j/wnW2OlVr8WVfanhtAu4Yg6robcz9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "1a585a88-83ec-4fd0-9a7c-1e8d559f9f84", "value": 41636, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "94957063-03dd-4f1a-8f8c-c53abc14adc9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f085b328-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "cbe7c752-8bbe-4924-92c8-cdb7eb33b665", "comment": "Malware payload (Mirai)", "value": "d6d16dc885702929a2200fc0876d9ec3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "3d47b416-58a9-4e61-b167-40837af1e0f8", "comment": "Malware payload (Mirai)", "value": "955dc8ad10b0a0785e2efe1327cd4bbd9fee4176e82537c3366ee04911785aa1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "6198165b-54b9-4d6e-996c-12404a7563c1", "value": "T12B13E1AF689DC1F9D8FE137029521B89BEBD9867560652BB01C83C7F19BB0CA1D70B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "58d42f85-3911-4ad0-a6fa-b5f966cfd270", "value": "768:nxhhZn/MZT5l2bqkFvuXaHPSTxO1AJTisIUD2ESspa6TC89QYNK6Bx05o:xhXMZT5r6vmWPSiwTisIUDtY61Q7+Ao", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "f5794ea0-da1e-40db-8ad4-4e7483da8af4", "value": 42036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "9cba9f0f-2d55-451a-bc0b-1cabfc49aeef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f087c145-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "4402924a-90d8-4606-a53a-9bc145a30bcb", "comment": "Malware payload (Mirai)", "value": "6f7d48b33d0b93cee016f550b7228c4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "1d3bfa38-7161-4d75-951b-07a5704baa1c", "comment": "Malware payload (Mirai)", "value": "c1f1b6c1164278bc9c5feb1f5d7391efaec91b59e7bce4cb70ae2ef274e8ed0b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "f249e4e1-1d4e-4b78-a82e-fd7883def979", "value": "T111935B22B539193BC4E4947722F35326F1F6438A14A88B2E7E710E8EBF156D0364B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "6bcc0598-6d56-4a3c-83f1-9000fb62d47b", "value": "1536:DCTLZ0J9dF+/EqR9oSccUvytX5Ym5ngP5gYtG9J:2yi+ZFaB5YOgA9J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "01fd96aa-b5b9-4921-a36c-b20d3d0e3670", "value": 91984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "2baf1111-29dd-44ce-99b9-bb701798c996", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f088abef-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "10d86425-c8a2-4d22-b0b5-29da9410e113", "comment": "Malware payload (Mirai)", "value": "9fbd8c89c715eb98f633f558951258be", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "713e65cf-09e4-4cf3-ae9c-2f688d155b57", "comment": "Malware payload (Mirai)", "value": "2ee89245c6dd3edd3e14f8bc52c866757ad98b97955b181d0cd5dc719004b893", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "192ac465-6b5a-4958-ad65-3d261281e236", "value": "T1CD51B5C751015F723D52DE2276BD484830BEA89A6DD79FE558DCB8B4408CE0D3C4AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "d88644eb-e1d7-4aa0-b306-673390a657ab", "value": "24:ItOsDPIhOE93VArPs8NTYTGF7JY2GACLnyNINks0ryjlTzyUp17J:iPdE93CQ8NTYTGFljCLdJ0rulTzVHF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "9b0e23a3-a441-4f0c-85d7-9b6e09d483d8", "value": 2789, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "7457aab8-bae4-4c42-a162-9ebd9790fde1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f08945f3-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "c6131af1-d09a-4c2c-9b52-77ed323936ab", "comment": "Malware payload (Mirai)", "value": "f225d83b26430e26bd8df7b409b03d6b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "78cbf369-cf9f-477e-a198-ff35684a6370", "comment": "Malware payload (Mirai)", "value": "f98f9ae6fc927faeb11fa38c4fc8151a619debbe23da9931354466a2d8878b3c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "2e68a32c-3500-49b3-8ce0-a2a762215717", "value": "T1D19318C6F401DC7DF80FDABB4463690EB631E2611A831B266757BE53AD321E05927F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "3b6b7a50-8318-40dc-84ba-7d8250a630ad", "value": "1536:jsdLEbXJld3puE6tRknqUDP4JX1ougFWSmfBPD8bcjabkH5A2gk0z/z/V4yFKGCF:jbuHt4qUDP4J4wSmfZn2wA9kqzFKGCJr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "97c39066-1a12-4f35-8786-c86763d31a3c", "value": 96740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "7abdd23b-1579-4343-bd70-b074e27f9289", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f08b1362-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "039498f8-134f-487a-b7ee-2be5a25ae172", "comment": "Malware payload (Mirai)", "value": "087e7a8d97dbbe5798cb9f0622eb2f12", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "df922aa9-7ba2-44d4-addb-3b2feeb3a717", "comment": "Malware payload (Mirai)", "value": "27c8ce01234e093b4302eaab7c3fdc8033ab848fe36c727a218d430477443273", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "6c9364f3-73d1-47d3-b92c-1d121da7c22c", "value": "T11813F2BEFB9C3891CDB9897148BA0E259809984335EE07E857051EC5E334E1AF70E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "287df04f-3815-4fc6-b27b-89844a3aa30d", "value": "768:wAYkIy0mPPUacW/T9UbKJ9EzoKW/0mNyCt5eGsyMBHDvuKzPhW1V:wAYkznKW5JAVmNyCtsHyMBHSV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "fe02a3c4-ef61-4eac-8f0c-1ea04beea64d", "value": 44548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "7c0a133b-6eb5-43af-ab0a-130f79dbf324", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0908964-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774830322, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "a2d899d5-8e8a-4585-90b1-57ba18c387dc", "comment": "Malware payload (Mirai)", "value": "e91adfbd04b437ad47a06e0456fd6b32", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830322, "uuid": "ca27d367-9047-4aad-847c-24d8c631653f", "comment": "Malware payload (Mirai)", "value": "855b9097543e9278ccb7fbaaa7c9f6b683284c07720a1d3d1313c7d035058696", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "70ed4b6f-444c-4271-96d7-d72b2ceba2b3", "value": "T1B703E0D6F4F75144E93E543C08BBF52118324261693809E6EC882673B74FAE5A27CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "bb249eb3-98cb-463c-83fc-ee91a8a8d617", "value": "768:B2xIg7G1/o/nvlTd++o8mhbuj68W4QDc8+iCMevlKnbcuyD7UHQRj9:EKL1A/NTdxqhbL81mc86MeAnouy8HyZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774830322, "uuid": "1e5d6234-f5d4-42b6-8827-4f5eb110bd27", "value": 41304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830322, "uuid": "3d9827ac-9ed3-44e2-b102-8465232b6635", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774831028, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831028, "uuid": "c236d19b-bc0b-4551-910b-9c3d84827b58", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831028, "uuid": "0fc242a8-27c2-4e6c-bda7-d48dd1c1e1e8", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831028, "uuid": "50120a3e-c7c7-4a1b-8533-f2d3e18bcbaa", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831028, "uuid": "6fde6ad8-bae5-4261-a6e9-dd53361a1b13", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774831028, "uuid": "87a8c368-08db-409d-9633-ce0f9899853a", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774831277, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831277, "uuid": "6d862809-afe3-4b84-8183-370eed880246", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831277, "uuid": "12b0924d-70d3-4f27-8ae5-a0688d2599bf", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831277, "uuid": "d9d3e6c4-d08d-4447-96c0-5e40406158a2", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831277, "uuid": "24461c70-aae2-4661-8035-7b7505611d95", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774831277, "uuid": "3dced6a9-e5e8-49cf-b389-7bcd209dc02b", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e3682ab-2bc9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774831328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831328, "uuid": "86d9fb4f-fde7-4579-ae5e-5c93c5c90338", "comment": "Malware payload (ACRStealer)", "value": "673bff9e20cac99e37f74c7610f42a24", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831328, "uuid": "0519c82c-25c4-46d3-ae9d-6483a7abc530", "comment": "Malware payload (ACRStealer)", "value": "31a4e1b2cd8078244210b042652c07033d4a4afad926429f67de1be13b403e70", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831328, "uuid": "30183614-1a0e-4915-bd8f-9582fb9c3ac2", "value": "T1CA365A0BFCA259E5C49A913485674316FAB17C481F3163DB2AF0F3691F327D01AB6B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831328, "uuid": "3f799294-e0ac-46d0-9789-b4f07cd02214", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831328, "uuid": "f5196929-a17f-4532-92cb-08823fa0a981", "value": "49152:QwzL+ISf0IvI2FGGlrX6HBQKx6t8qiHO82CdOiMOjW7pZmQclyItZpcR:QCk5hM6+u8eFV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774831328, "uuid": "b5125876-0a62-4758-a6b1-9bad21451732", "value": 4952576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831328, "uuid": "29fa1e22-e9d9-420f-a0d0-b891104909f8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "84fb4ae5-2bd1-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774831430, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831430, "uuid": "3efd58ce-89f6-4b3f-9715-da372d146d9f", "comment": "Malware payload", "value": "e78d24f427b37c3cfb87b9c667dada72", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831430, "uuid": "40933edb-cde2-4c83-8b6e-c4f3dfe1ed02", "comment": "Malware payload", "value": "5e1a1e1b9d7c74d4f308d6d79aea5e99602f49da8cc24110d9380bac42d49843", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch3", "colour": "#009966", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831430, "uuid": "fd19c105-0630-4bb7-a538-b95b0d778211", "value": "T1B333B219917F117F3907C8E13BE06B8731C1212FD789E8287FFCA2544F56DAA8A81B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831430, "uuid": "7c093f15-6a39-4dc0-86dd-adc406e2860e", "value": "768:e7oBFlFvFEFEA5oUTrc8gcGN7e69A/oAd5LClIJ+WOLE:pB3x2KA5oU3c1cb69A/db7yE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774831430, "uuid": "759f34e2-76d2-4816-b834-c5a207325489", "value": 53927, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831430, "uuid": "c17bcd72-c121-47cc-b07f-e6926e7e16a6", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774832535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774832535, "uuid": "f65180bc-bd14-4347-9cef-3de07dfd2739", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774832535, "uuid": "c574875d-982b-4bc5-afdc-645f3bc5770d", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774832535, "uuid": "dd8d2970-70c4-4ccc-a920-830595e03787", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774832535, "uuid": "8e45a5c7-07d8-449b-b18d-e5d21c958712", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774832535, "uuid": "51f21b4d-74dd-46c9-92d4-b2f279e69552", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1774834934, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774834934, "uuid": "9a09b0e4-c286-4b26-8df4-1fe87eeadff4", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774834934, "uuid": "461181c3-fc98-4739-bd0b-20fcfb918069", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774834934, "uuid": "e4e3a459-74f7-48dc-87f2-1f6ce1f183a9", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774834934, "uuid": "8d9f5995-26da-4655-94c5-587fea6d28bf", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774834934, "uuid": "3c5caeb8-3cfc-49f3-bdbe-2463fcd7b844", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2bf77f45-2be1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774838153, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838153, "uuid": "8dfb4edb-d98f-4df4-9033-5efd2a5d5a39", "comment": "Malware payload (ACRStealer)", "value": "83bfe0826fdf3dd5d796e63a711939b3", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838153, "uuid": "08cf68c8-3167-40c5-a7bf-9e26bcad72ea", "comment": "Malware payload (ACRStealer)", "value": "e904222262967fdd0d6e618a01dfb21404e5a520505af644ac989f38a8ca717f", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774838153, "uuid": "f755b82b-fd3e-41ac-87b5-69426ea386ab", "value": "T1C2365B0BFCB158E4C4A9923489678256BAB17C451F3663DB3AB0B3641F337E01EB67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774838153, "uuid": "0283e3bb-ce6b-40ac-a546-ad59dd7d48d2", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774838153, "uuid": "89eb2534-b7f8-4b44-b517-b1ef67e2c0a7", "value": "49152:0OAtyC93JAT903VrO7VRDWMqK/c3V6/fExwkde6AFsj0vQYQclAdO9nypcup:0O9u5kUBphvia/dO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774838153, "uuid": "ca4a3311-64b9-49e3-854d-2c4666fccb86", "value": 4957184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774838153, "uuid": "2d1989e8-6070-42be-a824-e7bb37b80b81", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9ca3416f-2be5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774840060, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840060, "uuid": "733b13de-fa2a-4623-bc07-c30758eff773", "comment": "Malware payload", "value": "ba2949533d93d6a869f7c43a47859540", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840060, "uuid": "9c6e4094-ad5e-4e91-823a-ca55fbad4607", "comment": "Malware payload", "value": "dc1e16e34e52e68384a60c661d53024152d100d5d6e15df13b0a3f27abea6be4", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840060, "uuid": "1b1e8f00-36bc-4348-bc97-4f179f67e96a", "value": "T1418309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840060, "uuid": "60fbe94b-6136-488c-8948-b85a1149397e", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnKWadVN/:XEKltp9txAX/yr2pbKWMVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774840060, "uuid": "57cc4425-b9a5-46d6-b228-87f69b55410c", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840060, "uuid": "caab3806-c2b8-4f59-8ca3-ff7fac02018c", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2bb13cd-2be5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774840150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840150, "uuid": "69235069-1e50-4c0e-8fc4-6bd0e6630774", "comment": "Malware payload (Mirai)", "value": "9b1d5321a68813717fcbcd78d0cd9250", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840150, "uuid": "6b20124e-ee05-4f03-8ced-deffb5ef0861", "comment": "Malware payload (Mirai)", "value": "81675467497da5d00b688b689c44d40650efb034d2a3e5346a85204695c17b9a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840150, "uuid": "c95f7ce1-49c2-49cc-9df8-f04e178fc7c5", "value": "T1CB068D42AA1C382FF4082EFFC90B8F1796395B655953262FE32A74505E323B53957E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840150, "uuid": "802feb99-2454-47bf-9ee0-bc30e7ebab9b", "value": "98304:UQi7cnw/9HwBSTKsXHrQfMJZ+qfQUsDQMGMKKpOAUk:UQi7cs9HwBSTrXZJZ+qfQPM9MKEOAD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774840150, "uuid": "a3742675-be90-4d06-acfc-2ce882af5e2e", "value": 3795340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840150, "uuid": "e3c4984e-2b40-405b-b10a-a5e104e0d779", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "beb732cb-2be7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774840976, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840976, "uuid": "077371f8-2ca3-4906-96e4-46a17ebea9cf", "comment": "Malware payload (Mirai)", "value": "40447ca01059307419342f1f8555adc2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840976, "uuid": "7899e94e-ed7c-4319-9cce-4f73b4d929b9", "comment": "Malware payload (Mirai)", "value": "b399c3bf1089f50229ad2583e6cadf48534614cf7ac8a032aa26bff441978426", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840976, "uuid": "08c3a937-04ed-4034-9c61-64ea73f4c140", "value": "T182065A62BC90CA62CBC066BAFB5E829C73135B75D2DF71068D14473436EBD5A0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840976, "uuid": "d0c27b7d-4141-40d1-8a40-f4e2b9d8a7d4", "value": "49152:4TAjIKerSFRL+ICp3RJGtNqJ4s94+8igQmuYUI0qmJ+RY23a4PCy:4TAjherS/+IAKzvskigJKI07uB3azy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774840976, "uuid": "2fa19964-86be-4d87-90c9-51270a6d61e0", "value": 3999008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840976, "uuid": "d3028d63-1def-44ee-a22b-97cb24f367ff", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f82a0fcb-2be7-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774841072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774841072, "uuid": "3086f87d-5691-47bc-ae04-574e6fd69a73", "comment": "Malware payload (Mirai)", "value": "1833e5a4d0cf705b62ebaddb52275805", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774841072, "uuid": "577f8036-1218-4938-928b-974f8c854e1b", "comment": "Malware payload (Mirai)", "value": "0add5328d3c88ceeed171893e545f0bcf8ac7eb7ec4580eacaf57a29f59087e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774841072, "uuid": "73ff60ed-ceda-43e8-a9a5-339a93c1dad1", "value": "T15D363B02AF449EF7D8EBCD315A3DC383049DAC97618C66267D7CCA5C7AA650B1E834", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774841072, "uuid": "dee059eb-68f5-495a-bb4c-40cdfe964c37", "value": "98304:c/tCsG4KeZwtsTYtRL9nMxJ24EerhtbFZLF8Ed8o/tvai:c1MVyleerhvHJd8KBai", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774841072, "uuid": "be58cd60-c437-4182-ba4a-b3ee5d803467", "value": 5340792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774841072, "uuid": "8e3fddcf-c769-4e10-bc14-bdb45b31044e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0599d504-2beb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774842383, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842383, "uuid": "7020057a-eaa7-4d5c-9f30-6668c92d642c", "comment": "Malware payload", "value": "625115c26aa39e05ed2cfee0b2a99d2d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842383, "uuid": "655c880a-cf61-4d00-8285-f7b2e1845d87", "comment": "Malware payload", "value": "a7381b76364868073df9561d10508a105c2ce361e096d68257d1ebd32149bcfb", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842383, "uuid": "83a0ba89-17b3-4235-9fb6-3bf6e70a073a", "value": "T1E0931A3174AF052A166F836E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842383, "uuid": "bff72f3b-1351-48ac-af27-3312545bb072", "value": "1536:9Byp1tF/uwMmAIa14oXI6I1epeV7tb73WdxCrCitkb5fv2v05xDer5iF+sCZKG6x:984IO0GitkbFv2v05xDerq+sCZF6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774842383, "uuid": "454ae375-ad36-4ee0-9d3e-f8b2df990071", "value": 94599, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842383, "uuid": "95239855-33b8-4442-9338-2c21b70df25a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2634be32-2beb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774842438, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842438, "uuid": "725614b7-72cb-4757-9a31-523841d9e95d", "comment": "Malware payload (Mirai)", "value": "caab4e806547cebb2977c3ee16f4ed32", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842438, "uuid": "9bb9c706-5107-48df-b676-e0324b3a3050", "comment": "Malware payload (Mirai)", "value": "be90278372d69bb7e268bba1f8b9b1d1bb596666262d408ef07f995b7f40d75f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842438, "uuid": "968493bf-16f9-4e05-b641-3fe495635d8c", "value": "T14E167C0373F5457AEAC05A358BFA43533286E6A464D54B228F50CE6FAF22B5328714", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842438, "uuid": "f6676de7-069f-4bde-9f0f-b33cd8182acc", "value": "49152:qXjmYkRIyqTxYSFnJqlsXH79gU6yaoqAPGpy5K:qXjmYkRbwBFasXb9gU69oqLp/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774842438, "uuid": "f7084951-e814-4668-a4c3-34917faa4907", "value": 4336716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842438, "uuid": "55d428b5-cdf9-41d0-b6c1-647070ad6df8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0b41112c-2bec-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774842822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842822, "uuid": "3495016b-cc10-42d3-953f-79ef191be28b", "comment": "Malware payload (Mirai)", "value": "a9144ee70fb6eeef73b14f10224dcd67", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842822, "uuid": "35805b9f-1958-477c-966f-a1299ef57a09", "comment": "Malware payload (Mirai)", "value": "32b7ac293d85e7a6d302192b99aa60f3b857cb11e73df7af5e25fc307c7bcaa0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842822, "uuid": "4c4c8b3d-0149-4a17-b325-f866fa9bfc82", "value": "T188464845BB2C0923D6530DF0993E43D5F3263B4382B1A22B6B0F67473179A36A6D77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842822, "uuid": "e133ee67-7842-4abd-a25b-cfaceb5e66f7", "value": "98304:Zwk0+TFHop0cg3VvcNeAkc9Xx9F2L/hHB8xccE1zaZ9oXYUFOubHVwUMSSPjYgD5:k0cdtHshTm+IriPnef3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774842822, "uuid": "99a7b088-f2b4-4f57-9d60-f60e444cedc7", "value": 5530764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842822, "uuid": "45613f26-7867-42e0-9152-c1605db8726f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60d3e32f-2bed-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774843395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774843395, "uuid": "4023db9d-0b40-477a-9aab-f57d29a4e132", "comment": "Malware payload (Mirai)", "value": "72a5b4ee86ab80906271a538cad53b1e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774843395, "uuid": "af0f9bd7-774a-4d8e-a35b-4feab4255c21", "comment": "Malware payload (Mirai)", "value": "09aa60962df24d5047317489edc680baf32469a3cafa528803391434f00b15f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843395, "uuid": "64202c0f-9413-41a4-8a2c-1110711f08a1", "value": "T137065A62BC90CA62CBC0A6BAF75E829C73135B75D2DF71068D14473437EB95A0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843395, "uuid": "a35d9489-8e92-4a2d-8947-3b23a3543d6e", "value": "49152:UPcr6YomgvtBnrUu3gTnoSVz4q2NvjJzQkbDZUtc++/jc3qSPn3:UUr6YlgvPrUu3yosUxJzQ8qtc7I3qo3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774843395, "uuid": "4593a52d-ab9a-4365-95c8-62426c0a6a84", "value": 3994916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843395, "uuid": "3580efff-ad50-4469-9cb8-04c66a2311ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc12e2fc-2bed-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774843602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774843602, "uuid": "6158166d-60a5-4230-a7b6-c007aa584c67", "comment": "Malware payload (Mirai)", "value": "9cc990a820baeec7921a4330ccc53491", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774843602, "uuid": "ed36338b-8ae0-4047-9f3a-079b94bf916c", "comment": "Malware payload (Mirai)", "value": "23ce78d055be74cfb1e48e0710bbbe7a521a6aad6e7cbc125d6936a216c656a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843602, "uuid": "021c60d7-99ce-4256-915f-902533d46d06", "value": "T17F3619132761DF1EF359C1340973CAA12AE515A229E584CAA33DF23C7E60A5A741FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843602, "uuid": "7848e044-8e7f-41bd-bd0a-d17343e58a2e", "value": "49152:oPuDkPGrxWFLLQHz5vZE4pnC6/cVafvTXXg9efz3jP0Yda3YKL76fYu4Gn7dqyEl:XDkAx7/vOQcQHYupAgWWFGNig", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774843602, "uuid": "0f515e54-43f5-4841-ab6e-5fea8780339d", "value": 5340792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843602, "uuid": "4d537be8-12f1-40e5-9bef-65d4a6a9842f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c059403a-2bf2-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774845703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774845703, "uuid": "dd515286-4bdd-43a9-8c4c-483934226b2e", "comment": "Malware payload", "value": "312ad27f701a3b5c2a31f1c5adf83702", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774845703, "uuid": "e67ec907-3795-4a64-b86e-af934a8e2403", "comment": "Malware payload", "value": "abeade8c0fe7ac8c64c6efd9f4411e3d0888e5e9c07845a9a0aed562c0322a3a", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774845703, "uuid": "2e2a90b9-7f52-44fa-a31e-38400f21098f", "value": "T16493E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774845703, "uuid": "7d03f90b-c15b-4af9-b593-3542f9d70cc6", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXqIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774845703, "uuid": "d7c142f1-8d86-46c7-93d8-aa017245d9c7", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774845703, "uuid": "bf13f152-7f82-49b9-a239-91562fd0c337", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a11d61f5-2bf3-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774846080, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774846080, "uuid": "8cde6f65-9d9b-410e-adf6-43cb42c99dd3", "comment": "Malware payload (Mirai)", "value": "ef05a8ac8b1848bc7824bfe3db7c6222", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774846080, "uuid": "ecc312ea-a570-4660-baad-557f1c9d1e68", "comment": "Malware payload (Mirai)", "value": "cd08f3eb5fffff86b21717d458e75b7005331d03849fafe597ced750e3e41b55", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774846080, "uuid": "6955e15f-c434-4481-af65-86cd6ee5e3c7", "value": "T14E465C1AB6B314ADC15AC430836FDA236D35B85542317D7F2684AE342EB6E705B2EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774846080, "uuid": "9f2b7fbb-1cf9-41d0-9bec-08e82741b90a", "value": "98304:TIHR0c9dpFdAHb3sxjEV085mLEM+Sx9Wic8Pn6tH3zwyWbVq:8yLMFWic1zkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774846080, "uuid": "cda19888-ee64-4f38-b50e-cbde45478516", "value": 5669928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774846080, "uuid": "9f64c19d-b48c-4cca-b3fe-e1ddbb41e08a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0df45e20-2bfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774851840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851840, "uuid": "c06232c6-77c5-4c86-8864-e7801fb9cb66", "comment": "Malware payload (ACRStealer)", "value": "73c7684c669874220fb0628835696af4", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851840, "uuid": "8056fc47-15b8-4ae7-9b17-196ac0aee004", "comment": "Malware payload (ACRStealer)", "value": "69a5b974b9fc2fd64bef7c21f66821136d2691c9bfae068053c628a99b24d626", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774851840, "uuid": "a4079db6-4e78-4bb7-bd9b-0c6ddd1197fb", "value": "T109364A0BFCB528E5C4A9823485778356BA717C491F3163DB2AA0B3692F337D02DB67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774851840, "uuid": "b6ab5aa8-99d0-43c6-90d7-c7c82b1d8729", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774851840, "uuid": "86248335-54af-44ba-9e91-7490094b5db9", "value": "49152:1epW7yfVBItN3uxDjHJEaPGc2NK7GwYjRUvEcQclbnMZpcE:1edNDqBlN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774851840, "uuid": "a93466e8-9a49-4c6d-ae34-af954ca96dee", "value": 4969984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774851840, "uuid": "673d7ae4-8ee1-4c32-b88c-90d303ae93f3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8ec1b73-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774852160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852160, "uuid": "f980635b-375c-4da0-a8b5-d191f9e49a86", "comment": "Malware payload", "value": "da75e70d6a8c5bf45500fca5a3302d6f", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852160, "uuid": "9c4d6311-bff6-4132-b260-e0955ead921b", "comment": "Malware payload", "value": "a188646a1676d1fd8e569011be0379008c104868c35859dee600436d2498cd16", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774852160, "uuid": "62e274ad-0978-4ac5-b955-dcfbd4d46ffc", "value": "T11031490D4FC41624E3B28936787BE30188247891ED43EE2D12D160982966611FA7AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774852160, "uuid": "72837442-25cb-4bee-9562-71f9f16d5c8f", "value": "12:8x0C3pQVe/4VGK0JMnOV+fIlVlDmo0I6DmNRcf/iB7+lbYZJl:8xFpQQ7K8V+fk4o0CmQabq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774852160, "uuid": "4f4c5e96-6fd7-462e-bd6c-975ef6675d13", "value": 1565, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774852160, "uuid": "19177a6b-366c-4bbe-be5c-5e2a58ffc67e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c057d208-2c04-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774853434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774853434, "uuid": "3cfdee96-6bf1-4f68-b933-0a18ff6c90a3", "comment": "Malware payload", "value": "daa31b68aa597dd4938bba8a216614e3", "object_relation": "md5", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774853434, "uuid": "d052572e-e0d8-41d9-83a0-300828951b8b", "comment": "Malware payload", "value": "b3158dfeb7798bd3de8634b22a439e58a58e81bd97ce84d6379441079156ab7a", "object_relation": "sha256", "Tag": [ { "name": "lnk", "colour": "#1fb927", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774853434, "uuid": "ac4ecf00-2c23-4c82-a17b-dc18e3c644cf", "value": "T132317D0C4FD50A14D3738D366457E301C8257422ED43EF2D02D1509C2866511FA3AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774853434, "uuid": "ef936059-b2f9-4d85-9ded-3d4e30c2ef57", "value": "12:8x0C3pQVe/4VGXJMn0V+fIlVlDmo0I6DmNJcfh7Ek7+lbYZJl:8xFpQQ7bV+fk4o0Cuh7E+abq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774853434, "uuid": "13fbf935-67d4-4af6-aee0-2b3b62639fcd", "value": 1557, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774853434, "uuid": "83397ef1-e319-4b51-9e09-32a7d3e591aa", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774854311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854311, "uuid": "ac92623a-cbff-4894-a71f-8fbf9539b6aa", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854311, "uuid": "79681335-bc98-4c73-9411-e90d48c353dc", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854311, "uuid": "903b4695-c0f6-45f9-9800-b56358f43157", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854311, "uuid": "d5e94653-85df-44fd-96b8-3c71d51d6d25", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774854311, "uuid": "896aff05-4559-4561-a175-180a44c780fc", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e49e577-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774854558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854558, "uuid": "b31b361e-428e-4aa3-9f40-2b4157e0e4d1", "comment": "Malware payload", "value": "0d417f4338254ee0a805350555b638b8", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854558, "uuid": "aec18504-9520-4839-affc-0cc512ff41b9", "comment": "Malware payload", "value": "60374c698bfca4c7bdbed4eb19fcbd4d84f827008e91cff3958063ce9da07866", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch1", "colour": "#61b0da", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854558, "uuid": "1430305b-ed52-4538-bcd7-b13b564d121b", "value": "T17503A55E857B029D340BD4E53BE1678732E0212FE749E82DBFDCE1104F46EA986D2B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854558, "uuid": "14c9987d-fbd4-4f6f-b87b-6b25cdfa78fd", "value": "768:ofrFlF3ZJFEF3WMZ2m2rzzAjgro9Vz7LgxbstQvCcfIaut2:Q3N2kG2m2w4UobcoIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774854558, "uuid": "0ae7fcec-ef55-41a5-8d82-01ea53d50092", "value": 40246, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854558, "uuid": "76ee3fcd-8b23-4326-8e12-e01c32fe9188", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "526c75a5-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774854967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854967, "uuid": "8e37f974-809b-42b8-9f92-cef856168df9", "comment": "Malware payload (Mirai)", "value": "4a44b34c67170056d39039d79c97bfae", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854967, "uuid": "04bcff68-4a96-425b-bc3d-cb9a705c6e56", "comment": "Malware payload (Mirai)", "value": "e760a81338d2a7ccaa83a6fcf43f23b05e5c0284410be7d995eed79d43a7065f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854967, "uuid": "0ba26882-e2f8-4b6b-bc52-e02d28195262", "value": "T150930846A9429F02D4D621BAFBAF414933137FBCE3F97102C920AF5067C69DB0E766", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854967, "uuid": "e9a96883-4f8b-4f8b-82f1-9da7e98bf10b", "value": "1536:7InHExxyuXoKfv6AP1wy1pHa08F9SlzDuWTeaNlWSihDn37wY79/nH:xxxpYYv6AP1wy1ha5F9SlzDONDn37wCv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774854967, "uuid": "7ea15c36-0872-4c5f-9f6e-6998ff9fd039", "value": 89528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854967, "uuid": "35d2413b-fe71-4bbb-85b3-a63ffafd6b7a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5275a533-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774854967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854967, "uuid": "7b987ee8-13ac-410d-9cd3-766ba0882cc5", "comment": "Malware payload (Gafgyt)", "value": "5b78d7e945f1978810ff995a8285a34c", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854967, "uuid": "3a9e32db-3e0b-42b4-9084-1f5247eec3d2", "comment": "Malware payload (Gafgyt)", "value": "e87ff6780c00bf117e4fad0bc8389d605550c04ff9565c3a14b0126058eec520", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854967, "uuid": "14b35a8e-292c-4c07-a626-05afb993b8c3", "value": "T15D83C71E6E218FBDF759C33547B78A21A79833C626E1C685E26CD2011E6034E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854967, "uuid": "cce3ad19-3e7e-4ab5-b930-18ea71812d0c", "value": "1536:cNV67Yr8ZLTrEyAlafla8kaXKtZSqiDzLcYeRIxmb3:oV6fZL3EyiZSqyLc6xmz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774854967, "uuid": "ee063b26-1c34-48e4-a81f-07e25321dacf", "value": 84960, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854967, "uuid": "373ba19c-47f9-4c32-a090-094b0e3bb5a8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5277fef0-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774854968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854968, "uuid": "c8685405-0495-4ab1-be05-34699f67ec2f", "comment": "Malware payload (Mirai)", "value": "c350e47feb7174a77331b51a41a35d8d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854968, "uuid": "73eec2b0-b581-4d2f-8f21-bfa941910c1e", "comment": "Malware payload (Mirai)", "value": "0eaeefe0fa7a28abcd93528f78b843cd2cf35812442c1d939d6405f09b2d35fa", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854968, "uuid": "a9249df0-7fe1-4b88-8eca-ebdc686165f6", "value": "T134534C51FC819A12C6D4127BFF5E428D772B1768E2EE3207DE266F21738781B0E6B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854968, "uuid": "adc4a051-3ea0-4788-89ce-a5ae5b850da7", "value": "1536:oaOZ8+U55C03LyIPZi+5kVhu1HSwOdFnkMJJoN:XOZEvPQ+5kVhY5Ec", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774854968, "uuid": "b9ba319e-2939-4d2d-94b4-e12378679ee8", "value": 63712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854968, "uuid": "25a4b79a-13c5-4b38-adb6-51d00be6c358", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5279061b-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774854968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854968, "uuid": "78b8c573-4634-414f-a1ea-da9c69e42ef1", "comment": "Malware payload (Mirai)", "value": "66ff03f5365428aebe374ce8b6c0f3c8", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854968, "uuid": "a3486972-f316-46b7-80d8-bca66a01dcfc", "comment": "Malware payload (Mirai)", "value": "4c2fdb14697376c1eebc362266536c5115e71cfc1fb21aa0c44d855cdd48beed", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854968, "uuid": "1102b0a6-deb0-422d-8134-cd130e679a09", "value": "T14C83C606BB550FBBDC6FDD3746B9071535CC651B22A93B363934D828B64B20B4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854968, "uuid": "06ea26fe-0ed0-417f-8607-991244ab531e", "value": "1536:C8EE8BuAlXfbMuWqeqFUq/vG7UUrQqZMsDhrFLw:bh8Buqvvr/vG7Eq3a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774854968, "uuid": "5415add7-0299-408d-9e17-997a8d93ace1", "value": 85200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854968, "uuid": "804ea14d-74cd-40ff-9ea0-77dc59482af3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7803f618-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "ba4ede1b-f99c-4759-9e2e-4abc247bf4fb", "comment": "Malware payload (Mirai)", "value": "d49a1521655b899a89723d617578fcda", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "fcdc689d-bc00-45f1-8c38-711188e1ee4a", "comment": "Malware payload (Mirai)", "value": "06349156d85a3a8577ac8cfd03c84ae468b5b0be477fafdeb7ce7892a55ddd29", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "bc560d75-9c69-4e8f-b2ea-effd27440c5c", "value": "T199430273CCF48C09F26606B70536FAD5D1C2D4AE1AB804B63B5039E51AED9B46922B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "7e8ec38a-653f-4866-b8e8-97581608a058", "value": "1536:6UaADD5K5ZZwFQesZBE+a3MrucFjZSPOvdoCQd4oZGclNU7D5nnouy8HyY:jtlK5Zi/sFCLQjZSPOvdoCQq6NU7D5n9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "4468766e-7a05-43a3-88a9-3718569ce0df", "value": 59972, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "09c3edcc-e76a-46e8-95e0-da0e9fc628d0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7804709d-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "0bbdc928-6e15-4997-bc55-0a87c43272ac", "comment": "Malware payload (Mirai)", "value": "c079bab5df368be0312e26771bcff92c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "a99592f6-021f-497d-9dde-0a8f657e113d", "comment": "Malware payload (Mirai)", "value": "93da1b21340a94e2ae7e298b9129697b90972ac017ecad792cbbf64ed15952b3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "6bb8c8ae-f774-4054-828c-b80600b5a7c5", "value": "T170830200D25188A3E29224B4E5EFCE49D4EB71BC74DD06F3539A844F68799507EE63", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "5c1dc1ed-6341-4529-af47-51769a20b2c6", "value": "1536:nQOafW5DLJTcMf8sHNxU6mjJO1otXO40f20opRXVAJIoFJ44jbLyxETXHUo7YkUG:nQsRJTkMUFj1M400yJIoAUbLgKHUo7Yo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "a5365c54-197f-45f6-8bba-97bd91ab87d2", "value": 88304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "10f831d0-4644-45b5-a372-343cae3c080a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "783e38af-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "c0bc5473-a589-4512-9a31-a119a4a891cd", "comment": "Malware payload (Mirai)", "value": "00c44f5734f9d5003e56a749653fc1f5", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "2f17fd76-7942-4918-9b36-d78b52eea306", "comment": "Malware payload (Mirai)", "value": "43929c55f1ce5cd5b573960734f53b3295a27b0c8e994b2a62aa7be767899e8f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "6a5749ea-4b5c-4dbd-87c6-a130623b5763", "value": "T1FDF2F175A67F70B4DBB2E472B028CA9CD24B59EAA1F4723B2CC00A79D0D500ABD352", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "750cb479-416d-4a60-aa3d-22f4d2259ced", "value": "768:8pxQBX9ACn0tmkFXL7Lfa0ZlafgEOIGr2PLF+kKLiM7lhs3UozM0p:8rQDAztmk/sfg5jracHLPez3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "b467e4b8-17da-4b36-8ba9-8d113eb7138f", "value": 34600, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "bc6ec583-a1a4-4273-9b78-8ae50978096a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "786b4eff-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "687478b3-6c80-456f-b6fd-d6c80e2472c0", "comment": "Malware payload (Mirai)", "value": "4ae6bfd217819cb335c720e562aad0ba", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "9b5ee155-be54-443e-917e-c33f47124395", "comment": "Malware payload (Mirai)", "value": "3efe93f0c0b131fa6458770452eb2fe66d070cdd79e80140c677f974334f5c48", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "4a07dc4d-1678-404a-985f-867d9ea1e5b6", "value": "T11304BFA3B34F2491C87106F80BCB6B9D262361125DA7DAD76C6F753A5E375DE08023", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "7a67351f-8ff5-41c2-af15-667deba36432", "value": "3072:ADBdjwnSSY0VLtsYPtkchPPd2WenqkxJjg/ClTK3KiyMq:mX0LsYP2chXdCqk/yCdK3sMq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "e18f797c-54dd-4e06-bb5d-55732984bd7d", "value": 173700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "23b991ee-c505-4133-829f-47964096cfa0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "786d6c88-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "9cc26d13-9dc2-4f1c-bcaf-3520e7593aeb", "comment": "Malware payload (Mirai)", "value": "477fda782b6603f03a735f9c6afd05f7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "5a44222e-7832-4e6c-9064-11fc2119b37b", "comment": "Malware payload (Mirai)", "value": "37586b88969bb679d2baa26a5385ef70bfcf239015d53f40f8113197e01c515a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "50706e58-cf68-43a7-a214-993d41d25291", "value": "T1C67302B0B5496433C2B224E6F873ED873DECAA7CF49EF50740ACD469F512A4354D52", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "3053aef3-ee34-4084-bbb5-5a72f48af117", "value": "1536:kguWOMb9QllElTTTg4GbhbbvxnhITUewquxIf5ZuHT7je7MKnPBvIEFOPB8/h5LP:kgGMbKi4hF7tHewquafuH61BfsE3LP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "e41a329e-23f7-401f-92d5-b777366f10d5", "value": 73656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "05476ffa-5737-490b-aa7c-639c81334ed7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "786e16ac-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "1e530ea6-4886-4ff0-9588-0ee90a393afc", "comment": "Malware payload (Mirai)", "value": "f7ef9310134781354214038184b27164", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "40c2d01f-f6c2-4d61-8c8b-6c13e7f3d3c6", "comment": "Malware payload (Mirai)", "value": "9e7cc1831e5868453091082155ef59935f54edcb988d5533221e6a7d42c28c8a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "1727a61e-2257-4021-8837-41915b8576a8", "value": "T1457302BD070048DEDD50AFF746AA4B621F800DB910868E40E6E6E6A21ED756435D3E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "3c4f4d2d-2c45-499d-a53a-ca093cbec951", "value": "1536:w0B3b87urwemjU1Fh+V3z6HdTSPzy4JTJeSesSg0uqzg13gVJuo:wwweV+VGHdTyf3esTqTVQo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "a5d96e66-0877-4adf-a50d-3a33c5209133", "value": 73728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "66116eb6-f14d-4cac-adfb-acc30146e486", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78740abc-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "be7dde0a-25bc-44a9-91f7-c3e746fecd8c", "comment": "Malware payload (Mirai)", "value": "feee94c02c339d9480ab2f6502a7987d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "e238672f-3bda-4829-84e6-bf9a44ca8bab", "comment": "Malware payload (Mirai)", "value": "1721839af55e4fe4e24b9e54dff63fb2ba371944be41f6341b916a65a277c9c3", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "d682c647-2dd4-464e-bb7a-ee5826675b99", "value": "T159F39D33C9A5AE98C6649474E0B1FE795B539A0641871FBB1AA7CBB54043DCCFE043", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "1c857065-b765-4d35-b439-508bc6ea4ddb", "value": "3072:nJqn73FvDaOmynee0PI71NGH19rVCUQLhQhWjEKpGh3:nJG5aXeEH19M1QsjvGh3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "d0095519-4b43-4702-90ca-0d0313e73387", "value": 164704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "f5a5ae75-9b24-403b-96eb-fd7b4b6ad69a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "787b2606-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "ffed73ac-5ed4-4fd8-b319-4291ceec52c0", "comment": "Malware payload (Mirai)", "value": "430828b54454f3d559e9495e4c406b36", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "e596df3a-97f9-4307-a61c-e4ca3ace15fe", "comment": "Malware payload (Mirai)", "value": "9235accd29bcbfe4b8025dffa72efa87762e11fb303d779420ddfb53039c7d7e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "1cb04c90-422d-483a-b042-083770f573fb", "value": "T1067302ADF62927E4C5610E30A1CC36616D2EF5801329CE4D53299CF8EF0D9B7A2690", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "fee3d82c-3e4f-4086-bcfc-ce2b9a553202", "value": "1536:qiNnqKxdbnutez1ehkEwkfR0GyV96XNTrloRCRz8UH:ZNqinuuehrw00Dudfzb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "5612f6ed-2c17-42e1-a179-4a3aabcf077c", "value": 76060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "657f5254-805e-4ede-88be-e24611fb0e04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78826f3c-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "9b6a9c2a-c289-441f-b437-5feb2ca7ede2", "comment": "Malware payload (Mirai)", "value": "e816d3bd8af1c5dce5cf3a8b69c9e095", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "391de25b-db14-4c6e-a2df-9d9ab0b346e0", "comment": "Malware payload (Mirai)", "value": "4ef8ad9cf632ce26be2f565262ded3a22842c586313a16d38ee4777e5f85f96d", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "9586589c-2abe-4523-abce-eecb2cd396dd", "value": "T138630298C711C9CBCEDB6DF40E547BF1A3326D08A57619D2B379878067E6E0A520AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "5449aee1-ed3b-498a-84ea-877fe3e623c0", "value": "1536:VjT9TY4ATMQiJ9LEf2q33MSwnI/FPZ7TKMMkqsLfZCkljeV2E4u+qgw09+:HY4bLPLEf933Dt/RZ7TNZwV74u+qgwn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "f9bf9d0f-2523-4e2f-9bb7-6004f3a72f8c", "value": 67684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "afaa2e5b-fd3f-4781-a7e3-2e40fd83298f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78834009-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "069775af-8921-4a08-8f07-1e41020c81ad", "comment": "Malware payload (Mirai)", "value": "649d114a22afd05947975a5b58d5d0ad", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "b0045b4f-9ed9-4852-baca-049223bed515", "comment": "Malware payload (Mirai)", "value": "640aae768ed104fb6c8f5fc5693d3984d52c3656b418ff55b8bff5b69250294e", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "26c81002-f37a-4e34-9092-00f1a4de418c", "value": "T165630287F11FDC76DC5259B139A38088F310E64FDABA132D45052A784DBBE721469F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "bce6c90a-1c00-4d2d-a63f-c57a765fa1ab", "value": "1536:2SA9ENb1r8Vr6oU19i0lzM339BtKfdYMWzT0nmMCaV/lubVy:2SAUb1OQ19i0lz439BgdY10mM9g5y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "1d0c9bec-55ab-4b70-a954-a7ea7809a1b3", "value": 70740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "ab0cf5c2-0b58-4c0a-b199-4bdc417538e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "789129d8-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "5a133c22-71dc-473a-b332-19a51f8ba12f", "comment": "Malware payload (Mirai)", "value": "b0d59407222c1a462b030a8920518825", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "17ee1989-218e-4cf5-9542-843abb94e8b6", "comment": "Malware payload (Mirai)", "value": "d2985fa008e8fa04fa8666c2f2fb5d447a9acc1c85b610e57923ab73d411b5d2", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "659dc3c5-a7d2-4cd5-82ee-0e99a916449d", "value": "T1131429CBF801DDBDF80BEA364C531909B170B77214925B372257B967AD3A0E50927F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "d86d86e8-3ae6-4837-a354-ba498888a061", "value": "3072:V3D0W6+PRn0wVQUW5SuM+uOT0mhgO7qIpjzJH+1Y+3PTJ9lZ++fFEVNjbihLCXV0:N/LnHfAS2pzJH+1R33W+fpLC7yXE90", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "580a90c1-4dab-4075-8157-4b7eb6964f0e", "value": 200608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "1ecd341c-d558-4965-b335-4ba7d6b709b0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7895caa0-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "47105907-e7ef-45a9-8277-2a32729f1e27", "comment": "Malware payload (Mirai)", "value": "d6dbe7b93f46c49850270d91582ca3e9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "2cca8a1f-55d1-479a-9859-8686bae31622", "comment": "Malware payload (Mirai)", "value": "93d7a9c209ac7237b01b19faa467ffdee41d1b4392ee84c007457302be44f390", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "947587c3-00d0-4b0c-8b8c-b41b57c96032", "value": "T1EF342348D6F4C267C53418BC9C7C82FD1B124E2937FB80E35E13F9ABA645A351C689", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "06f9da3a-37c5-4094-8331-3182b8dc6721", "value": "6144:zJ3dOqy+6QLf0bru4b1wl0P7LzbyLtjRJDrV9E4P:z1xy+6QLfY92WP7LzGLt1JDJ9Ei", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855031, "uuid": "c16b387c-6e10-436e-b679-135a5105c7dd", "value": 252792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855031, "uuid": "80238346-7b3b-4eaa-b1b5-47baa9ddadab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78a23d15-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "e1714e3a-e274-43ce-a391-e8a1190b5a17", "comment": "Malware payload (Mirai)", "value": "dc3a2f67b736b6767207ed3318752a8b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "1b4a5ef4-b1a9-42a5-b436-efeeab53c988", "comment": "Malware payload (Mirai)", "value": "78b1f087230ead241657141b363d532ed48e35cab865bf5e27ef4f761ddd476c", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855032, "uuid": "3dede8db-78b8-472f-8593-1c31d68a38db", "value": "T19843F11EC4982C9CE9A8C13C2DED774D1DB0E00AEBDA5A948745164EC943EFAFA64D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855032, "uuid": "48572184-76aa-46c7-a664-86b9b116a621", "value": "1536:fGIsYa2RmMEH6D1IqZdHXXCbgOg5R/GQRZN+nouy8KyZ:fGIK95q2qZRXog5R/GcZNeoutp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855032, "uuid": "1f49bd84-41ad-4efc-a046-46000871741d", "value": 57248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855032, "uuid": "0abc7e6b-bbf4-480c-83db-e870d0bd2c6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78aac6b5-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "7320823b-6ace-4935-8734-7aeb7f6b616c", "comment": "Malware payload (Mirai)", "value": "33e4ddac9c1af5d1c75f16055f8e27a3", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "84a447fc-daa7-40a3-bdd6-ab1b7267d92c", "comment": "Malware payload (Mirai)", "value": "ec75e884f1f7033aed21f3d93c893239c349efba5d799b8d34c67be61c6d1592", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855032, "uuid": "8abde86d-94b0-44cb-b557-f3d5dd2224c1", "value": "T17563023E531A76A5A9E8E03641468A87E2D7A2BDE17F786D0040C0DE2D5C07B0B5E9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855032, "uuid": "bd236886-efc4-4323-a969-44123df82364", "value": "1536:6ZlqTVq40QhRrsw0qakCyaL7zgCHtVnjJ7aaz8C1zE:ulR4Fvow0rkSgUtFcE5w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855032, "uuid": "ad3039c1-9bc2-4754-948f-dccb1656e3f4", "value": 68872, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855032, "uuid": "7bb902ed-bbe3-42ab-8d18-851bba1e92f2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78b91fca-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855032, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "d29b599c-26ec-4b64-8ea6-82f892010851", "comment": "Malware payload (Mirai)", "value": "8aa5bfb0ed7cda49f63516b9657ea248", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "b8cc4dae-319e-4ba1-83af-21f2bf09ccfe", "comment": "Malware payload (Mirai)", "value": "d025eb12dc4be6b1183406858e9e6cc4564788928e678db1b6bb218c70bf8c28", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855032, "uuid": "a4fc03ad-1adb-48ee-b12f-ad4fa8c27349", "value": "T11BC1A4861145CF33BE08ED16B9A55D0830D02AF0DC96FF4AD4F755A3FA5DE88A802E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855032, "uuid": "9bd96373-f8d3-407c-82a8-baf6000efa16", "value": "96:475vJGdU+Zu8dJ4JB+fijIRqqJHcZEqqZpZcXHKvJ:ivwdUE7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855032, "uuid": "25b1f7e6-f44e-4493-b511-64d5eacb6baf", "value": 5730, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855032, "uuid": "9804047a-5765-4420-b371-5388406365f0", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "99e1be38-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774855087, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855087, "uuid": "b7da1ff6-392a-434f-affb-947f130f8246", "comment": "Malware payload (Mirai)", "value": "6f98eea26df902fcf67626c72d97bde9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855087, "uuid": "e182a85f-ced7-4c85-bb8f-903e004df12a", "comment": "Malware payload (Mirai)", "value": "d4263fcc87ce1de0e75d043f65d29c3e926064e4157e3090dd006f64059c3d49", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855087, "uuid": "7731c957-e899-4854-8419-10a62c8c6f7d", "value": "T1E9633B41BC815A17C6D41277FB2E428D772B17A8E2EA3207DD255F2137C782B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855087, "uuid": "e43ec6c3-3ef4-4431-869a-9c39fbc844e3", "value": "1536:mAygc09zCh6jgG+4sDZgGT97Fy+OSWOXv3esfEnvM:mAyAc62dmGT97FK0gM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855087, "uuid": "918cfb44-f19a-4557-bd4e-39cda832eb22", "value": 66876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855087, "uuid": "ee5d7516-5627-4fe1-b37d-dbc1555910e3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a033939-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774855088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855088, "uuid": "9c0f0a7d-ef3c-4513-9a14-cbd0c650937d", "comment": "Malware payload (Gafgyt)", "value": "db14b08f090d1a461ac9a1c57eadce9f", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855088, "uuid": "01d629bc-863d-48b1-8286-48cf5a40cc2d", "comment": "Malware payload (Gafgyt)", "value": "a40ad0e99455b45c535e5e0b12c76bf417a198591dd83b3403ccc02362be11e2", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855088, "uuid": "78d15577-984e-43a9-b00e-3b7a59d76503", "value": "T16E41A48A20E108B07CA2A4B773756D107595A25DA4CDFF8F7BDC38E5488CEF5A425B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855088, "uuid": "509d0d26-c4c7-4e8e-bf1b-9ba10a04a31f", "value": "48:1fth4tlXaLaMalsBHdHp4H/9Yc9QsQfkXja1prfQ/plkdaA/FWoszbsplkdKed+B:1fth4tlXaLaMalsJdpelYc9QsQfkXja/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774855088, "uuid": "fe951fb4-5997-4d2d-bf2a-5a22abe1128e", "value": 2059, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855088, "uuid": "f467b661-ca1a-403f-a1d5-61eba4c26d31", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1934a4c0-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774856117, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856117, "uuid": "00309de2-1a43-4a8e-ae50-0b4756b57771", "comment": "Malware payload", "value": "1ff5a92a793b1503e1399bf2434ac5c8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856117, "uuid": "82e43df0-2e8b-4c88-a7a7-196fb1663681", "comment": "Malware payload", "value": "22eb75dfc037517fc0f62570c77379a708a8769fe654bb7c58177ecb17f3c2ee", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856117, "uuid": "94f984f4-ddeb-4dcf-8495-2d666fb528c3", "value": "2213028237A53F72D52188F4D7BCEFCA614A7D94AFA9181BAC123698747135C28C981F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856117, "uuid": "7610a99f-85fe-41c9-b380-18267cf4e86a", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTzEsD9:yYI0ARqw1qAEW67UIWi7M8gmf9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774856117, "uuid": "8fb0f2e5-169e-4e12-8694-c8432847dec2", "value": 44888, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f465df8-2c0c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774856680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856680, "uuid": "b8e13bf8-cd41-4238-9af8-c5ecfe270b42", "comment": "Malware payload", "value": "f1233ab7ae9ca95b960338f4d7d590bc", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856680, "uuid": "835ef7aa-23aa-49b3-af5e-cc6b701eff40", "comment": "Malware payload", "value": "ddc77d25f4351f4109244884dfa15fb2b35987a3abe3f12b89c7cad7a8903578", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856680, "uuid": "fa5ce80f-4e1a-4e2a-a0be-65566469e045", "value": "T11234F18F5463FA046D4476382AE768458EC40B130216CB76F7736F6ED60A52FEB4E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856680, "uuid": "5cc41605-ce6a-4ad8-afb3-e6d98c53041f", "value": "6144:Fow3cwBQzha2zWn6L8F1DE1A1Hn8qRWpky:FowOtxW6gbDE7vpky", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774856680, "uuid": "39ef0050-0ab5-458a-b145-82dcb233e4af", "value": 247895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856680, "uuid": "be51929a-bbca-4844-a609-71e541a9b54e", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97ea97b4-2a74-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774856819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856819, "uuid": "c0b3640b-0fb5-43ef-9786-0464f4a226fe", "comment": "Malware payload (Mirai)", "value": "a65d521be5d56edf673dc232b4747b21", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856819, "uuid": "83dcdc1b-d2e5-4719-bc70-2d62cc7001c6", "comment": "Malware payload (Mirai)", "value": "55db943ff242b32de9dc9fa31473a4b849ca92dcee182a2d8265053f4bd67c74", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856819, "uuid": "3f1cece3-acc3-4708-980a-7c26d851799e", "value": "T178736A21B87A2F27C0D0B43A62F78725B2E1270E29A8C75D7D760F4EFF2569065435", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856819, "uuid": "fc9bd4ce-473d-4a88-a368-23656c2810bb", "value": "1536:zv9jASMFAhg8eHBginMOObc+hu4NU9asxAOs:pVLeHzIcl447i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774856819, "uuid": "959eee47-2d05-4f72-9697-1c21ba1a31a1", "value": 75240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856819, "uuid": "6c07121f-9b75-497a-bfb5-9f6806a443ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8dd7b755-2c19-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774862369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774862369, "uuid": "e351831f-fdb6-4ed8-b6e8-36ab385bb575", "comment": "Malware payload", "value": "8aa2fd7ef6716f5dd0beab02e06aed15", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774862369, "uuid": "c1193423-152f-42e4-93f4-fa026c8a6487", "comment": "Malware payload", "value": "a8c61412556d701593cb7bbb9cde2cb0fbdb6ad761784e6dea8ebb3adf1833d5", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774862369, "uuid": "5cc4a6b3-0319-4f0b-b247-71660e14a7ac", "value": "T174F2955EC677029C340BD4B52BA1678732D0716BD289E82CBFDDE1144F46EAAC6D2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774862369, "uuid": "37c502a1-e450-4c99-bd6f-b6d40d395169", "value": "768:oPrFlF3ZJFEF3WMZ2m2rnKWCK0SCceIaut2:i3N2kG2m2zKWYPIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774862369, "uuid": "2ab792b1-bc53-478a-9daf-867d43293197", "value": 36182, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774862369, "uuid": "1d2d4507-159e-49b5-82c6-3ab8a4f5d1a5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9370c656-2c19-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774862378, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774862378, "uuid": "238e06a9-4df2-4074-9623-058a6e72f407", "comment": "Malware payload", "value": "988ef54f2f6c368230483c00d0814842", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774862378, "uuid": "52455a33-7f86-4db7-8da2-f40c42d878f8", "comment": "Malware payload", "value": "4d7cfd9160a12240d3bc5d6c17ed8db640eee5dfac0e54d2269f10ff142d5748", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774862378, "uuid": "2ad3736b-24fc-41c7-885b-2ab2db7495d9", "value": "T1C303A559C57B026E350BD4E53BE1678732D0212FE749E82CBFECE1500F45EA98A92F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774862378, "uuid": "7bbe1942-6459-41e2-a678-52eb22838f5e", "value": "768:oSrFlF3ZJFEF3WMZ2m2relEDlqSkCBxyfCceIaut2:t3N2kG2m2mGvkCy+Iaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774862378, "uuid": "b8d9182b-5867-44e3-8bec-32628c40fedb", "value": 41369, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774862378, "uuid": "06030fcb-e982-4567-99bc-9f9a579af081", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94909ca0-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774863668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863668, "uuid": "76a143ad-86fd-449f-8ad3-ecb1f7c28980", "comment": "Malware payload", "value": "774804627f29bc0dfb25b9f536b4eeb4", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863668, "uuid": "ecc6e437-a234-47bd-9212-7f21fdf23444", "comment": "Malware payload", "value": "caa903462b4d876b7669fdd526a696307e995661a261860e79b9e178c17d419a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863668, "uuid": "f60570e4-ee88-4d2c-85a6-ea72fd3ac302", "value": "T191B42369227F71900C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863668, "uuid": "f2c5c175-499e-4555-8521-ab627d58bc0c", "value": "12288:V7JZAaFpeOqO3g/ALyYG0ZaDajTCXMO8xzDOe3WS:JLpeEA/f0Za6TCXKBxmS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774863668, "uuid": "b023f1dc-aa80-4b62-a1c2-addadf3c5b33", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863668, "uuid": "d246555f-3100-47a1-9743-bdd903b0fbf0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "949c0e91-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774863668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863668, "uuid": "f6cd598e-f69b-46b8-a51f-476d21b8b2b6", "comment": "Malware payload", "value": "16d3a82f0ddf1a4b879a4bcb884431c8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863668, "uuid": "4e7a9ec9-5d8c-4485-89ea-5c79e4fa475e", "comment": "Malware payload", "value": "32d7a6dbaa6dd4abe9ab68b56770194000566609a202a5d81a4366e9fe2ccb24", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863668, "uuid": "57af85f9-f055-442a-85f4-9396c261f0b8", "value": "T18BC42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863668, "uuid": "7f9f7469-e42d-427f-a8e2-f94fe3a35353", "value": "12288:/6wlOMWROC/FTeHo22Qm7NzofOr68mkeA924EwCi:H4MQOC/gHozN7NzomW8OA9h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774863668, "uuid": "edeb8333-8807-4dde-87d1-0d516e9bc012", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863668, "uuid": "e653aa24-dbd7-44ac-8ec6-d1ad09291a54", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94a7d135-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774863668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863668, "uuid": "956984a6-4032-4fb5-97f8-bcb7fb9b1c94", "comment": "Malware payload", "value": "863c41f9c8f0c0df0bee6d4a4811388e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863668, "uuid": "0157e6d5-831c-4163-a151-b3c9f91d008c", "comment": "Malware payload", "value": "b6523d559e47f594ba1e1ebff43295dc238a92b279c3ecd43505f4e594608919", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863668, "uuid": "377c8c18-3cdc-4edd-9ab2-c9d6e0600aef", "value": "T1E1C423B7179AB0897503E3E4854C6D94C9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863668, "uuid": "e9b77da7-5bd4-4d51-bbad-adf6f2025eff", "value": "12288:SeElNtIBB2gX3U5vA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezM:SeSIBBfH5m6Jj6ESfUxZ91kmY/9Hew", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774863668, "uuid": "e057e4a6-a56c-42ff-8d31-c92969fb2f39", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863668, "uuid": "26c23a77-fcd9-4528-b7e1-e3ec9e54a678", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94ae2065-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774863669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "38b16c72-97ad-4d66-9357-260db1e7bdf0", "comment": "Malware payload", "value": "c3fcd248457ced8565fd4b70cdb1b5e2", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "3733c289-0dfe-44c9-b67a-66db3a80f7fa", "comment": "Malware payload", "value": "b9fb2e9f986739999814ccc9002921d25cf8c3618b86f96f54e767e3123d86f3", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863669, "uuid": "b78a1c9f-c5e3-4d89-9deb-b903148b1b7e", "value": "T1E8C42304340641D5835A2B1EAEC4E6E0BEF560DBFA1CF940AADD7ED06DE92A177C18", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863669, "uuid": "63aea2ab-25fd-4a04-8880-424d94c3af97", "value": "12288:D6wlOMWROC/FTeHo22Qm7NzofOr68mIeA924EwCC:74MQOC/gHozN7NzomW8+A9F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774863669, "uuid": "1bc27b36-0365-4f84-ab1e-838202b01cb3", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863669, "uuid": "c7000f1c-8847-4b64-b16f-8bc1910f9c0a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94aee385-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774863669, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "fff48cbe-088e-4529-b0eb-ae4f06b5e71b", "comment": "Malware payload", "value": "957360aa22359e4472e6110f852005f9", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "8b8764c7-9d65-467a-bca4-9a9d3613d0f6", "comment": "Malware payload", "value": "4009229da19ca78385204e19b3a3db040c821fea32d8f245301fed1fa9daf417", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863669, "uuid": "85b70054-bf0f-4e5b-a2a0-a474c272e028", "value": "T16BB423F5A7606BCC9D20122F2F4A2BCE19274B51B403C54A1AD2875A421F7FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863669, "uuid": "24b567a1-d16d-4af0-8185-134717095494", "value": "12288:iBRdpQ73iBVYWMCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUz:iHUw2WN9XgbM0azTHiQIouDf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774863669, "uuid": "a1ceec51-b1e0-49fa-9011-34cd423d1a64", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863669, "uuid": "d731f9f2-23de-45f4-9c9d-4b32d30249fc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db4af916-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774863787, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863787, "uuid": "e6c12959-9591-4cbe-b30c-d2fd15006db7", "comment": "Malware payload", "value": "a9f6a723b86b3e2a17a1b9e83e6ca79a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863787, "uuid": "596e83ce-c31e-4719-9289-cee202c85477", "comment": "Malware payload", "value": "741f8f906b77bbd9ed25948bc8651392add9a34fe48ac7b5f528de2c9d6e441a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863787, "uuid": "777359ed-8402-492a-9dd4-7c334713fccf", "value": "T100B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863787, "uuid": "4639121d-0d6b-4dd0-9173-bb0fe53fbb04", "value": "12288:ZGRl4nbDDGIabs/7iiEVwYg2l3/2NHfy+wK8h:VTabs/7iiWw0Kaxh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774863787, "uuid": "55ef7091-d6cd-4c36-9f09-ee1afba50a53", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863787, "uuid": "88c69696-2928-48c8-a40d-fc2798e20e5d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f6b1e64-2c1d-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774863901, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863901, "uuid": "2534243a-37cf-4bf3-b8ee-45aedc16a79c", "comment": "Malware payload", "value": "503ec61f5ac453e04c1ba02a8669c364", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863901, "uuid": "0239baa1-7fb2-4d7c-8ae3-74edc409af95", "comment": "Malware payload", "value": "8531f3c10fd198dde84a440f942045fd0d273d2963ef38a713a5b5a09bbf7c6c", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "emotet", "colour": "#23d4e5", "exportable": true, "hide_tag": false }, { "name": "epoch2", "colour": "#FF6699", "exportable": true, "hide_tag": false }, { "name": "heodo", "colour": "#75b3dc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863901, "uuid": "58a21a04-e890-4ad3-b1e8-ee0304a8732d", "value": "T1FEF2965EC577028D340BD4B52BA167873290313BE64AE82CBFCDE1144F46EAA96D2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863901, "uuid": "8e723f4c-e0dd-4192-ad54-c8bf844eb649", "value": "768:olrFlF3ZJFEF3WMZ2m2rOhu+o62CceIaut2:s3N2kG2m2wo6rIaut2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774863901, "uuid": "8d18b746-c451-48da-81d9-12de6d143b02", "value": 35448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863901, "uuid": "e3f59893-51c4-4e34-84e0-202d4c1971a1", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21b8f835-153c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1774873929, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774873929, "uuid": "a0a27338-61c3-4800-a783-59391a8fb98b", "comment": "Malware payload", "value": "1326c16a18441423830933fbb3a6a290", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774873929, "uuid": "51ed6602-6a76-45e5-89a3-b0b6758a968e", "comment": "Malware payload", "value": "3bb40456027c77d05b991e4686f10e51739a6ebdca3e33ec5edcd1e2c28b34cf", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774873929, "uuid": "a0935a78-ecd3-4d75-b58e-c80a03392119", "value": "T1BC310FB618F340915C13946647F77749AAA6C503E58EC84138DCA248CFA9EE4C5E3B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774873929, "uuid": "328dcbd3-de27-4001-a50e-04aa0461e8b3", "value": "24:hY8DqCsgnIRRZ2gbIOUpGpDST9Cq9PG5iAxGJfAI1+Fb8YEzUL8oh4z4j:bcgIE6UmUCqh7AxGJIi+WNqRhRj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774873929, "uuid": "e0575fca-ced3-4b30-9ac3-f2d204b76dad", "value": 1686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774873929, "uuid": "3464665f-fc89-4dbd-b46a-0a0722f878b7", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95e594b1-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774874408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874408, "uuid": "f73561b2-3285-4be1-87d3-3877637a7a32", "comment": "Malware payload (Mirai)", "value": "bafe25262024e07ea9a663511edee8f6", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874408, "uuid": "5fc58f44-64c1-4465-acc3-fd0a2aa8e495", "comment": "Malware payload (Mirai)", "value": "e85e295ea489ab1650f656897ee0fd9d4e1ff1f115b2f6af7fa90eb6e469112a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874408, "uuid": "3d2da892-3a60-40f2-9f48-73874ae75415", "value": "T1CB514EC922D25032AEFAD97373B98544B9A0508735C67E489CEC38F4C68CD46A5C5B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874408, "uuid": "6605d07a-b73d-43ed-8d68-729a55bbc230", "value": "48:ipfqfipfgfN4pfxfipf1fapfxVfxUpfxXfxApffOfApfEfapfhfipf4f/4pfnfCn:ixcixiN4xJixNaxxtxUxxvxAx4AxGaxz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774874408, "uuid": "06a1b3a3-0e2b-4404-afc6-5caa86125103", "value": 2479, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874408, "uuid": "29160825-fb7d-4c75-82c7-10aea5a19b83", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "961d06cc-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774874408, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874408, "uuid": "cef8fe8d-0c97-429a-8263-0605dc1c22f8", "comment": "Malware payload", "value": "188d8592f393ce45f7273102f02efee1", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874408, "uuid": "5cd20152-0362-4603-adb5-127513bbf7b0", "comment": "Malware payload", "value": "7321caa303fe96ded0492c747d2f353c4f7d17185656fe292ab0a59e2bd0b8d9", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874408, "uuid": "be42277f-be4c-4431-977d-6258ef5b5281", "value": "T1E1B5AE219A8C9182CA7BB777DDE1BD0655188109F63EFC1A364400353B72BE89FE53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874408, "uuid": "3949dc4b-b302-480c-9dc7-e48113af8ec8", "value": "24576:rX5s7IIJ0BemXNXI9fXxovWLZg21bRecJykl3dpblLn7STR7mhiY6Dp90u2xkm9h:1+IIJ0rI9/evW5D5Ct6bYsustS1y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774874408, "uuid": "afaab340-af69-4cc3-9893-574627e34e9f", "value": 2316358, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874408, "uuid": "76a8e222-a892-4422-8c6d-312123559e72", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96504070-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774874409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874409, "uuid": "6bdac32b-9971-4038-bdc7-2ac607bdaa19", "comment": "Malware payload", "value": "5870a0bf82bbdf2687d8dce89dfa668f", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874409, "uuid": "46e3d4e9-e3ac-44f7-8907-f2370e025273", "comment": "Malware payload", "value": "cd08115806662469bbedec4b03f8427b97c8a4b3bc1442dc18b72b4e19395fe3", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874409, "uuid": "c6a2c0b7-17f0-4774-88af-bdafd6c25172", "value": "T1E4B5AE219A8C9182CA7BA777DDE1BD0655188109F63EFC1A364400353B73BE89FE53", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874409, "uuid": "cf2fb355-9d09-4217-8e90-c6d72d6cde9c", "value": "24576:raIs7IIJ0BemXNXI9fXxovWLZg21bRecJykl3dpblLn7STR7mhiY6Dp90u2xG/mV:l+IIJ0rI9/evW5D5Ct6bYsu4J2VMSeEk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774874409, "uuid": "e99d6c0e-2d4a-4776-8a42-37865c890c6b", "value": 2316357, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874409, "uuid": "b86fc549-8784-4f6f-b8bc-f105eeee6fd9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "01e82f53-2c44-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774880602, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774880602, "uuid": "943cf962-fee8-46e8-bb20-1a4573759f91", "comment": "Malware payload (Mirai)", "value": "08f421109e15bf6bb928c0dba89d02d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774880602, "uuid": "a3f0afac-ea66-42a3-8d84-1eeb7ec4b2d0", "comment": "Malware payload (Mirai)", "value": "6913460e32fb1d5be1199afb22d2646c4ef115d615988c97a96c63e012fd8199", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774880602, "uuid": "9fc8c54d-536d-450c-8b9f-be67d9d97b0e", "value": "T19713013304E4F439E232613F8EB89A0AE6051A54C9FB327E9165826B63C90179DE7D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774880602, "uuid": "fe618edb-2d43-4750-87f3-ca1024d0a198", "value": "768:7WxVDfLABoGgFnwVLrWieCYNjp1+530kAAGBAb17JIQPgZAI00I6nuvQBi+zs3UL:7CDfMBDGIrWieXN+5ksGqJIapMnUh+ec", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774880602, "uuid": "e7f915ba-783a-46cf-b9a5-f81d3a480651", "value": 43136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774880602, "uuid": "fee0bf11-6ef2-422b-a668-3f9215f76b21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86b390f3-2c4a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774883402, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883402, "uuid": "bbef471a-2809-4c48-9f3f-a2e17f17678a", "comment": "Malware payload", "value": "dd5495c1fc86a8a52c6137bfbaf03f04", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883402, "uuid": "7adea9d3-7436-4c4a-9bfc-a0970b25842f", "comment": "Malware payload", "value": "2e0b70a7bc9c68828e26085b5a281fcd4dd700d0ccff8d9de5f66481121f284f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883402, "uuid": "4d6e20ad-f6ed-4b2d-8afe-a0827e58d658", "value": "T131F301E37610067BAD78D8BB7B1649C950B5FF0043A0A0E397EF799495A4B53E0B87", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883402, "uuid": "b1dc16c4-3aaf-453e-9099-508323fb5b57", "value": "3072:nm2IOklC8RctVISJ2N2/MpUU/NDApK99xohG:eb2kLZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774883402, "uuid": "e5f18201-a2c2-425f-a152-8924e761fc45", "value": 172679, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883402, "uuid": "3aece839-40c2-4868-ac42-2769d5522f82", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7f0b0577-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774883819, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883819, "uuid": "20b83052-5eb0-4ff6-8093-a3df3049a877", "comment": "Malware payload", "value": "9d925245a74e7bf945ab96b30296b20b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883819, "uuid": "b8605ef4-92ed-4571-b031-935b0ee205ac", "comment": "Malware payload", "value": "3f297142d3b8e9c4287162b96aac6f91ad6ebc85ae2934e0c559d943c8147f44", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883819, "uuid": "788aae44-e3ca-4154-9cec-054be10b7368", "value": "T1AC8309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883819, "uuid": "c2b67914-d301-4123-b59c-e5f39605f297", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnZWaVVN/:XEKltp9txAX/yr2pbZWcVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774883819, "uuid": "73e9cee3-6375-4cef-b335-39c7ad13ca58", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883819, "uuid": "f9fbfd64-0c49-4ee2-9aae-65fb2482050d", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1f96e468-2c4a-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774886300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774886300, "uuid": "558eb9c7-6700-4e43-8abb-32910cc3ca09", "comment": "Malware payload (ACRStealer)", "value": "2b63b5a382b4fabd3e7076d083eb97ee", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774886300, "uuid": "b148c4f6-17cc-4d40-90f2-05a20ea46967", "comment": "Malware payload (ACRStealer)", "value": "33c47942c21d84fb64295b61e73a2135a32559d010dd0d10e5b15c4c0c9f0660", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774886300, "uuid": "0fe5fa2c-2983-4bf2-9217-4a0a8839ae74", "value": "T1E9365B0BBCB158E4C8E991308567825ABAB17C455F3123DB2EB0F3781F727E05AB67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774886300, "uuid": "63bff7ec-400e-414e-bb9a-701d20409d4b", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774886300, "uuid": "a5ad2b3b-4d4c-4944-ad22-5290b8cd35b8", "value": "49152:8nIHOnPQLDjXTmqFFq5Un2tcWcs2KQXj9YjeCTB+QclVxZrpc:8nIyqC5UBZYjzBw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774886300, "uuid": "aa53e6db-45a5-4bc6-b137-3bf731b8f1d1", "value": 4972544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774886300, "uuid": "5e50f3f7-3f26-469f-868c-cfe8b34ee2b3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "75949f2d-2c54-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Adware.Generic)", "timestamp": 1774887668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887668, "uuid": "02f63a3c-78ce-4dbc-8842-f7c1a4caba3f", "comment": "Malware payload (Adware.Generic)", "value": "afabc82d38f5b462982f95f80dc12f00", "object_relation": "md5", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887668, "uuid": "20aaa811-d6e9-42b7-b311-223ef579494a", "comment": "Malware payload (Adware.Generic)", "value": "90a9206cbca802b8958972d8f5d112bafbb572ed0c29268df51f093e969c4322", "object_relation": "sha256", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774887668, "uuid": "b7fb1aba-2720-4186-b647-03e6af40f65e", "value": "T1A7A6223FB268653EC9AE0B314A738310597BBE51A81B8C1E07F4694DCF764601E3FA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774887668, "uuid": "5fb40a0c-d814-4477-911e-76c6a70410db", "value": "e569e6f445d32ba23766ad67d1e3787f", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774887668, "uuid": "42743f85-fb56-4cb4-aea3-818ed66f0ef5", "value": "196608:meq9QpkG44d3oUxYiK7Mxga3LYLW3Qs2qrKIsCdcna0KT:HqAkG44d3DWiNLYS3Z2qrKckZM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774887668, "uuid": "6d72300c-04ce-45a0-9ec9-990a09309382", "value": 9507357, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774887668, "uuid": "eb43b546-9f9e-495d-89bf-d9efb5993d28", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8e8eb80e-2c55-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774888140, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774888140, "uuid": "5ab89ef3-c1f0-4550-b7fd-0e6d40ce6308", "comment": "Malware payload", "value": "294c06920ccb5c979756781d3d0f4183", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774888140, "uuid": "c558a9e9-09a8-46ff-9fdd-fcfb35100f15", "comment": "Malware payload", "value": "36ebc020e082f2b2c6fa601b05756c7e6483ff330381049941a47f977dc33223", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774888140, "uuid": "3318736f-c7ce-4d7d-aa6e-0c34d7b3a71a", "value": "T19993E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774888140, "uuid": "4aa698f0-e589-4143-8575-5c5c9c82d0c9", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXuIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774888140, "uuid": "16073e93-2387-4176-8a94-9ec0b2539274", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774888140, "uuid": "2b783ded-8aa1-4433-898d-00b4eeecd0b2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "426795bf-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774889300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889300, "uuid": "3393108b-1ea8-456f-9de0-c72253c573b1", "comment": "Malware payload", "value": "ec0839be936bec93f5d58ee0b711cdd0", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889300, "uuid": "64564836-8ac2-43dd-8a57-427d893f86d3", "comment": "Malware payload", "value": "6e3de1632f5dd5ac68f00d22fb62694d8edb6fa5388110cb18a6287626463d2e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889300, "uuid": "7cf47b92-c3a7-46d1-a401-7d73aeb11e23", "value": "T14F82D06AA07B589726BA355BDDC6AD06054231D3019226976B0AE143774FFC8C2C2F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889300, "uuid": "eb243ee2-a989-44f1-9a62-b6d69ead94fc", "value": "384:MTXRYxgNBeQ9bbNRdZn21IvzacxPF/w/4zi0EttTidken3WEN6xbR3:Ml93JRRd016pZwq3WKT3BkxbR3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774889300, "uuid": "69ed36ad-2e79-40e1-bc23-8cb437d78321", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889300, "uuid": "ba358927-b795-4231-b951-d2a1e0c59c6f", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7dde2454-f2d8-11f0-9446-82aee05be84a", "comment": "Malware payload", "timestamp": 1774889468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889468, "uuid": "f5033f39-d034-4fd5-8ea3-3d92f7ad39cd", "comment": "Malware payload", "value": "e4d5b4b0f98560e882ef7d24b1012b6a", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889468, "uuid": "af403c35-2f98-4353-980c-6680dc07323d", "comment": "Malware payload", "value": "d26c1da1978da0296f16094a6f20cca8d3d5e85f047fc0f80eb203aae6770599", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889468, "uuid": "25fff78f-7506-4066-9e31-462c441ade45", "value": "T11CC3F1BCDC2C5442CA1B61F28C4ED11665DF841DF9E79A5672100A480E69EC0FFB6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889468, "uuid": "5a384f9d-ea7a-4659-81d6-fe83dec1f4a6", "value": "3072:7gg9/shHyGE5/wskZ0MnIUboP1TXQEAh4:VkIGE6taMnIUboTgNh4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774889468, "uuid": "f9f690ac-1864-4504-99d9-59730a987d91", "value": 120852, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889468, "uuid": "aca2223a-3610-446a-81bd-a62ba9ac8405", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a6d80480-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1774889469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889469, "uuid": "89dcaeec-d9e8-43fd-b2fa-4e2882aa741e", "comment": "Malware payload (AsyncRAT)", "value": "ca2e595881e56dbf63cf891ee14300cd", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889469, "uuid": "a6fefc82-c913-4a6e-b443-9da6042ff1f5", "comment": "Malware payload (AsyncRAT)", "value": "291543374d0ee4f983132128dcef16ebc8c058f07b1dc1b1f7d7e11d189fd42a", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889469, "uuid": "2b332832-d7a7-4ef4-8c4d-f2955fd54b93", "value": "T18D538C487BE14629D0FE5FF449F2A227C774E3935803D69F68D901962B27B8C8D14A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889469, "uuid": "948ba5ae-7715-421e-8183-72ee331ebd28", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889469, "uuid": "e9826550-3b13-4d6c-8c08-362adb76e44a", "value": "1536:DVBi1Y0TD+tokrjoTBDIT1+b/8ADQCwlhradOXWv/:sY03aosjoTBD61+b/8qrUr+OXi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774889469, "uuid": "3bd7b7ca-5c42-49e8-9a6d-525c399b071f", "value": 63488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889469, "uuid": "bba5c1be-f785-4c64-9534-538b65404a68", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7c0ceff-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1774889470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889470, "uuid": "faaea6d7-d643-4d36-be20-3e973baec502", "comment": "Malware payload (QuasarRAT)", "value": "8090c32b447f955e276ad8f005ea4775", "object_relation": "md5", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889470, "uuid": "4e3490b3-16d2-44f3-bef8-9b6a03e21712", "comment": "Malware payload (QuasarRAT)", "value": "240e2575f20c75c6b5e2ea69bc0f0d9675ffd3fea315ca818bcbee2572ee972f", "object_relation": "sha256", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889470, "uuid": "aa0e0837-39ba-4f5b-b05a-b5454d1c4b0b", "value": "T1FDA5F151B3F5820AF1BF2BB9A47604590773F942AA35E74E098CA1AD1FB37408E507", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889470, "uuid": "2882418f-731a-495d-9467-d0cc4f35480e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889470, "uuid": "e2fc5cf2-0abe-4ed7-bb95-ffb71983ee80", "value": "49152:DqW07wRPirm2NnPTKKm77LrwCB6uan36z6:DqWjoZNn2Km77LrwkFW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774889470, "uuid": "75005468-cdb7-40da-900f-19e57f14855e", "value": 2181120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889470, "uuid": "0bca078b-7403-428a-895d-d164d9feeeaa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a835d918-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774889471, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889471, "uuid": "14ede61a-a037-4614-8856-ecdd0a6b4a14", "comment": "Malware payload", "value": "0ecc8fb65b8807f5943cd6a49127cefa", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889471, "uuid": "fd5df9e1-fe76-42b0-8416-705cfdb02366", "comment": "Malware payload", "value": "372748f3d615839bef7f9d85eeccac7bc9d508bd877cdfe03b0c9820d248072e", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889471, "uuid": "65e373a4-2ae5-4f36-89c4-42463293441d", "value": "T11F831215B6483DEF6E69A870BA715E366FF7302DF6880264DD9F434E82058F70D209", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889471, "uuid": "6f25910c-ac7e-4e27-a2e1-3a9329b529c1", "value": "1536:fjllJ2Vex6qonJMTV+kUt2rFNwQ8TWiaUNvcHfT1xxr+dlaOqf4wgS+Aj5Wwmt:fjlULX8rNZWQWWiaUtc/d+Atmt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774889471, "uuid": "146c2207-403d-4d92-bf3b-7635b70f043a", "value": 84172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889471, "uuid": "67f653be-f72d-4e03-85cc-258e798c2fe9", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a87fbc9a-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1774889472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "66fb3f5a-8303-4765-b1bf-40601b843442", "comment": "Malware payload (AsyncRAT)", "value": "7e2fe58934874e442cfa183a34ceb24c", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "266448d2-05b9-4e9d-a9ab-3390b428974f", "comment": "Malware payload (AsyncRAT)", "value": "b7fa1e5cefb7f5ad367271f29bde8558566c17da169b5dac797c79beb3fc4531", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "32c1ff6b-4e0c-4183-a793-d1f27e972004", "value": "T114737D183BE54119E4FFAFB55CF17123C776F2236807C65F68D906861A23B8A8E412", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "6e56f62a-69d2-4253-8eb3-a51f1dccc58a", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "7e2c5764-c0f3-4699-90c8-794f5abcdfad", "value": "1536:/sSLo8byJhYfyM3sLcGhF7G8NM6OUbSkgv2WKsbZInO4XjUaLkYK77:zLZbesB4cGF7DrOUbSkgJKsbZgO4XTW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774889472, "uuid": "20ca6cf6-fc78-4465-aac0-3cb144378e40", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "b2459b98-ae9f-46e5-890c-904cb8f4ab58", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8a42d98-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774889472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "6ec9f3d3-f8e1-44ca-9edd-b741fea12896", "comment": "Malware payload", "value": "06a0157faed27ce7c434d117240b700c", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "ddd5d07e-4449-409e-8b4f-30ce89ead0cd", "comment": "Malware payload", "value": "98718b5082ba958a27583ea79e1e378b432adcb0b2d7d1c85dcc4cac7a5951a5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "75b90dfa-ac86-48be-a727-523db9e9d7cc", "value": "T1AA24AE94984CACCFC6A24BD66B2FBD1D751D7232B1D9858132ACCB4343A1E7EA5132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "3c5d2a87-b32c-4fcb-9d77-7aca9e8bafc0", "value": "6144:EFmzvvxYe0r/q0wyQN34zFelw7gYncWfYKm:sm1YZi0qNohelwLFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774889472, "uuid": "f4213f6b-fbbb-4fc8-adcf-a98dd19686ba", "value": 226665, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "97e39147-c650-4b07-86a2-9c4245ff9bb0", "value": "application/pdf", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a8e6f4bd-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload (QuasarRAT)", "timestamp": 1774889472, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "bec58bdd-fd91-4379-bd7d-98ede5f7e2ca", "comment": "Malware payload (QuasarRAT)", "value": "f162419fce4eb4dff92be342c47662c2", "object_relation": "md5", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "e164263a-90bd-4f8c-ad10-2101512e4c12", "comment": "Malware payload (QuasarRAT)", "value": "3a4b0f50ea3eac55e22cbf24d873f9a1632d8f71e1fba91178c539030626ab32", "object_relation": "sha256", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "f1e56d4b-435d-43ae-9969-9885b6dda73a", "value": "T10EA5F191B3F5821AF1FF1BB9A87205590B73F8429A7AD34E458CA49D1FB37408E107", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "47b27414-c30a-43d1-aa1f-05b5ac949403", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "761925ed-ebed-4a99-9fe2-4297ec7a6796", "value": "49152:VqW97wRPirm2NnPTKKm77LrwCB6uan3Z:VqWCoZNn2Km77LrwkFW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774889472, "uuid": "5bcabb89-a74b-495b-a774-fbfb44904bc8", "value": 2182144, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889472, "uuid": "e3f21698-d34c-4d6d-b0b8-8fc879b27026", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e46bb9c-2a74-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774890805, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774890805, "uuid": "caf2ce32-40e8-4a2b-bd69-ed800ee9aaf2", "comment": "Malware payload (Mirai)", "value": "dcb9f6ee078c423ab7c1d4f7141845b2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774890805, "uuid": "23ac66ba-260e-4107-aa6b-eec878b30632", "comment": "Malware payload (Mirai)", "value": "c990fae684b215cdedd79223ac1e0da674ae011cbd63caa8e7b0f67db871ebb1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774890805, "uuid": "b9da252e-87d8-4957-9973-0a811aa9d9bd", "value": "T1EA634CD5B4008E7CF957EABE81164E09F92173045FA30F2BAA67FC936F631999D078", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774890805, "uuid": "b4c890e7-d9bc-4469-aac9-db47e22c5353", "value": "1536:3XoMCyq+8o5qqpODv08RaI4psFjaqMqnggYp+xBeVHQ8++p:3F8oSjNaZsN3gWB0X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774890805, "uuid": "d3d8876e-625f-41eb-9d30-25af3e19fbbe", "value": 72692, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774890805, "uuid": "9bd5a05d-e6b8-4a51-ac99-3472ed4c3006", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8163c63-2c65-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774895135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774895135, "uuid": "0b782907-55af-4d0c-8f9b-81c6b357ae5f", "comment": "Malware payload", "value": "418d779a64c7c1ca23970439f499ac4a", "object_relation": "md5", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774895135, "uuid": "acc4ffc4-4912-4d0d-85ed-98aeee955005", "comment": "Malware payload", "value": "56869cb9bbbb35dacc11d15e8218b9ee48f3ec803a7c7f91a104d8b743acc514", "object_relation": "sha256", "Tag": [ { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774895135, "uuid": "eedcd133-a491-41a7-aa80-8543b50d8be3", "value": "T18C860127BE86CC39D99740B359C2C953643A22DAE81BD82F42E04DC95EB1D5A0352F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774895135, "uuid": "aa461834-4db3-49bb-99fd-62a3ae50355e", "value": "196608:0qydo2IdVbb+sKVbaTd9wMeVep2fGup7h:05e2Ijb6sKk5CMx2+Cl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774895135, "uuid": "fca52593-4ea2-4a7d-8f3d-f466a853fd50", "value": 8043368, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774895135, "uuid": "12c68040-23d9-40bd-a8d3-d478400a5127", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "db4ce149-2c6b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774897717, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774897717, "uuid": "fa1cae1f-62d6-4c6d-9879-3459e0e4abf0", "comment": "Malware payload (Mirai)", "value": "9828c5f9ffd647466a530c9c17df956c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774897717, "uuid": "a6a74569-ec69-41c9-83ef-f1c678deed2d", "comment": "Malware payload (Mirai)", "value": "59f58331db299a26516255ca986ce79f4f362343eee95e387e0331a53007312d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774897717, "uuid": "82e2d948-2360-44f2-9aba-cb29091257bf", "value": "T17413F1D3E4E5C305EDBE21BA28AA328B5410762D8925FDF7C7C13709B6427B560DCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774897717, "uuid": "4e797883-1c32-4792-92a9-d8f45c4ee179", "value": "768:wIz4nYXX626Oy6z+R3zjbs/S9EEYZm655F3haSV9JL+nbcuyD7UHQRj6:lz4nY626Onz+hzjbGMEEgm655pscL+nb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774897717, "uuid": "ddbe57a5-d4f7-4c6e-b83a-42563636f63b", "value": 42920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774897717, "uuid": "38f97233-446f-435c-8bea-5565a3046df6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17ee1b06-2c6b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774899668, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899668, "uuid": "adc2f5c5-07f5-46ed-8ef1-f65a25f550bf", "comment": "Malware payload (ACRStealer)", "value": "015c9a66117a97ba89c2b4216feff817", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899668, "uuid": "9492fcbf-f0c8-4b5c-a535-3412224ff372", "comment": "Malware payload (ACRStealer)", "value": "9b545f2972a9962e46f3cd9f44931e267780211b04fd871a2907edda042f69af", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774899668, "uuid": "c71c6cb0-5f15-45ba-a16c-1f73f0587a36", "value": "T1A9364B4BBCB118E4C5AA813085674716FB717C841F3163DB2AB1B7A91F32BE05EB67", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774899668, "uuid": "8465029b-f0c7-4980-b681-8e253bfa8862", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774899668, "uuid": "e5d692b5-6b2d-4721-a974-5c01c59fde02", "value": "49152:8fbGdAj+XswiM3h02XX43kj1oN9+eTVKXnexfjgxZ81lLyjdjNkOxYUPQclSBhpc:8fQvL3q0XWY12sOLxOXo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774899668, "uuid": "4ae883be-b0f9-41ab-a057-1ad7e9b32af8", "value": 4938240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774899668, "uuid": "669856ea-bdc7-494c-92ea-52f4ff856e7a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9e34d01b-2a74-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774903238, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774903238, "uuid": "0595ecc1-3912-40f6-ad81-987c375ed132", "comment": "Malware payload (Mirai)", "value": "847fd8f3495915ecf6a7d35037aa0be5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774903238, "uuid": "28645410-68bd-46dc-adc2-e4d8a252bdc2", "comment": "Malware payload (Mirai)", "value": "7d235334a669faa5d2b6e1c1b1bd59f38af7bc555a69e17c732617ed101ff055", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774903238, "uuid": "66b73957-7441-4edc-bc0d-e14d50901a58", "value": "T19F539EB3C4295CA0C6A94139B9E9CE382B53B10492736DF55D568FB6A007EECF1093", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774903238, "uuid": "effdd284-1f53-4da9-a8b5-39fd3d799bee", "value": "1536:s/MM0k1EvamwtYBbLridkodwhniUDo3SQCmL:sUMvqvR3vGUiUDo3SQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774903238, "uuid": "458840f6-edcb-4380-9687-70aeadaa5fbe", "value": 66580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774903238, "uuid": "fdcb49ec-15ac-45f9-a848-fd3e15040831", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "059010a4-2c7f-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774907840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774907840, "uuid": "ab29ccd2-4e98-4447-88b3-d6ec5662b9f4", "comment": "Malware payload (ACRStealer)", "value": "6304fb7173f9a8056532fb15045b77f8", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774907840, "uuid": "8bd0ce6e-333b-4c8a-b4d9-05df8e89fc8a", "comment": "Malware payload (ACRStealer)", "value": "4e8b93c315302fd961961d214e69975718d7f3422316ad5271a2cf1d4cec0f45", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774907840, "uuid": "e9ec906d-7eb1-44b5-9446-acb36381dcb4", "value": "T1D576B60BAC214590C5689074957F43567BB73C441F212BEF3EA9B3212FA37E46AB53", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774907840, "uuid": "03a55427-f550-4cc1-87c5-0957748da115", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774907840, "uuid": "e61fd518-877d-46de-9f56-b382968a88bf", "value": "49152:50owT2oTJL8nTTJPuKsDcS31GZMHO2BJlZLVRj378s8k8QQclzdfpc3:50xkToMgZJz4R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774907840, "uuid": "91aad4b6-05f1-4a7a-a3bf-c03364eed681", "value": 7360512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774907840, "uuid": "189e2dca-4db9-46ba-89d9-27ebdf6a7576", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774828868, "uuid": "8dae3ab9-2bcb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick-step.velocityterminal.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774829110, "uuid": "1e56760f-2bcc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://instant-msg.velocityterminal.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774829367, "uuid": "b76e493c-2bcc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.138.113:39468/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774829409, "uuid": "d08d7309-2bcc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://city-monitor.metropolitangrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774829418, "uuid": "d5e951db-2bcc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.49.105:37108/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774829709, "uuid": "8325f707-2bcd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://street-logic.metropolitangrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830010, "uuid": "36823114-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://area-scanner.metropolitangrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0e6790a-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0e848c0-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0e8551c-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0e965c2-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0ec1151-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0ee0363-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0f2331f-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0f23930-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.arm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0f84214-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0f8437c-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0f84c37-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0fb41f7-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0fbb78c-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0fbbada-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830323, "uuid": "f0fedc9a-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830369, "uuid": "0c5713e0-2bcf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://block-sensor.metropolitangrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774830669, "uuid": "bf357e68-2bcf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zone-portal.metropolitangrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831028, "uuid": "952de911-2bd0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.195:48960/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831087, "uuid": "b898da8a-2bd0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://urban-access.metropolitangrid.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831278, "uuid": "2a662a1d-2bd1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.109.177:36113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831325, "uuid": "46a2687f-2bd1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.32:59143/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831328, "uuid": "48072f17-2bd1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://traffic-api.urbanflowmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831398, "uuid": "71ee994b-2bd1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.101.142:41784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831519, "uuid": "ba0be227-2bd1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.109.177:36113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774831688, "uuid": "1e99dc48-2bd2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://stream-audit.urbanflowmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774832227, "uuid": "5fc9cbdc-2bd3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.20.195:48960/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774832287, "uuid": "84177e3a-2bd3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://surge-protect.urbanflowmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774832358, "uuid": "ae34da86-2bd3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.101.142:41784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774832413, "uuid": "ceeb66ef-2bd3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.236.110:47287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774832469, "uuid": "f03548c1-2bd3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pulse-check.urbanflowmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774832535, "uuid": "17e9bbc8-2bd4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.72.243:47068/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774832710, "uuid": "7fbf1c34-2bd4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://drift-control.urbanflowmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774833009, "uuid": "320b7a0e-2bd5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-master.urbanflowmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774833127, "uuid": "783cbb36-2bd5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.92:35204/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774833256, "uuid": "c57325de-2bd5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.210:56994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774833310, "uuid": "e5818fb6-2bd5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://coord-sync.precisemapnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774833322, "uuid": "eca0468c-2bd5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.236.110:47287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774833322, "uuid": "ecece339-2bd5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.227.112:43810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774833427, "uuid": "2b9357d5-2bd6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.144.234:56511/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774833558, "uuid": "7933d162-2bd6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.150.64:48974/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774833729, "uuid": "df0886b5-2bd6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://point-atlas.precisemapnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774834030, "uuid": "929648b4-2bd7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://layer-stack.precisemapnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774834329, "uuid": "44edfd3a-2bd8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://scale-vector.precisemapnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774834626, "uuid": "f60a7f2c-2bd8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.229.32:59143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774834690, "uuid": "1c585266-2bd9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://view-finder.precisemapnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774834934, "uuid": "adb1fc07-2bd9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.173.182.43:48089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774835000, "uuid": "d4a2dce9-2bd9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.210:56994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774835109, "uuid": "15d9f52d-2bda-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://topo-render.precisemapnode.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774835302, "uuid": "88d2db7d-2bda-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.219.150.64:48974/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774835348, "uuid": "a450d3ec-2bda-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://local-cache.districtbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774835421, "uuid": "d00f4242-2bda-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://160.179.232.22:42545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774835709, "uuid": "7ba7957e-2bdb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://temp-storage.districtbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774835957, "uuid": "0f2c93dd-2bdc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.202.103.37:54151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774836071, "uuid": "530b880b-2bdc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.208.235:46771/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774836071, "uuid": "53753b4b-2bdc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://queue-manager.districtbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774836366, "uuid": "036013e0-2bdd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://relay-point.districtbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774836369, "uuid": "05100ca0-2bdd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.204.206:53755/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774836729, "uuid": "db33f746-2bdd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load-buffer.districtbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774836853, "uuid": "256aef70-2bde-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.15.6:60177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774837028, "uuid": "8d98ee7f-2bde-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-archive.districtbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774837028, "uuid": "8df1a49b-2bde-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.235.145:45505/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774837219, "uuid": "ffc6e405-2bde-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.198:40172/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774837401, "uuid": "6c12b959-2bdf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.202.103.37:54151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774837451, "uuid": "89b6be91-2bdf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://admin-panel.sectoralcontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774837808, "uuid": "5ed31c2c-2be0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://unit-command.sectoralcontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774837877, "uuid": "87ce5425-2be0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.204.206:53755/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774837927, "uuid": "a564b161-2be0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.235.145:45505/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774837985, "uuid": "c7f846b4-2be0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6560547276/Yzztzly.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838060, "uuid": "f4c4ac96-2be0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.141.178:56935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838074, "uuid": "fd1ef65f-2be0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.114.184:53561/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838118, "uuid": "176d8170-2be1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.15.6:60177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838168, "uuid": "35379d45-2be1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://remote-desk.sectoralcontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838418, "uuid": "c9fae5f9-2be1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.150.114.184:53561/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838590, "uuid": "30c2575c-2be2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.90.238:58076/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838647, "uuid": "52a6c98d-2be2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://system-core.sectoralcontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838828, "uuid": "be618aa1-2be2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.32.92:51410/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774838891, "uuid": "e3e2d384-2be2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.198:40172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774839067, "uuid": "4cbbba93-2be3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://switch-gear.sectoralcontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774839546, "uuid": "6a86f489-2be4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://task-logic.sectoralcontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774839669, "uuid": "b3957894-2be4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.90.238:58076/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774839916, "uuid": "47574f56-2be5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.172.181.187:42299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774839969, "uuid": "66dd9699-2be5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://link-secure.linearbackbone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840294, "uuid": "28908c67-2be6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.205.114:46464/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840399, "uuid": "66cbf698-2be6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.172.181.187:42299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840638, "uuid": "f5726c39-2be6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.239.190:47182/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840747, "uuid": "36a074fe-2be7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-bridge.linearbackbone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774840988, "uuid": "c5e32557-2be7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trunk-line.linearbackbone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774841243, "uuid": "5e3fca19-2be8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:54949/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774841302, "uuid": "81748609-2be8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.52.142.194:54949/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774841411, "uuid": "c245d2be-2be8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fiber-route.linearbackbone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774841782, "uuid": "9f657d99-2be9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.114.151:60712/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774841893, "uuid": "e12aff3c-2be9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-frame.linearbackbone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774841959, "uuid": "08ce2191-2bea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.117:46773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842138, "uuid": "73985d8e-2bea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.87.239.190:47182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842370, "uuid": "fd8f1828-2bea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://node-carrier.linearbackbone.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842379, "uuid": "03586a5d-2beb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.167.26:51704/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842558, "uuid": "6dbf054b-2beb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.203:59596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774842727, "uuid": "d2952033-2beb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://inlet-valve.centralizedduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774843211, "uuid": "f2d1dc42-2bec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://outlet-node.centralizedduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774843272, "uuid": "173cb4c1-2bed-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.50.138:33657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774843687, "uuid": "0ee3327d-2bee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://filter-proc.centralizedduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774843705, "uuid": "1948b568-2bee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.174.62:36200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774844168, "uuid": "2db04166-2bef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-guide.centralizedduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774844227, "uuid": "5067256d-2bef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.245.32.38:49439/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774844652, "uuid": "4e33a93e-2bf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pressure-io.centralizedduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774844666, "uuid": "560320fc-2bf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.167.26:51704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774845132, "uuid": "6c280e1a-2bf1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tunnel-sync.centralizedduct.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774845489, "uuid": "40fc335e-2bf2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wide-telemetry.regionaltelemetry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774845967, "uuid": "5deb824a-2bf3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://field-report.regionaltelemetry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774846219, "uuid": "f3c9aee4-2bf3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.224.161:41242/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774846509, "uuid": "a0a52222-2bf4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://signal-box.regionaltelemetry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774846687, "uuid": "0ac2223e-2bf5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.216.167.20:58590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774846930, "uuid": "9b91af94-2bf5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-packet.regionaltelemetry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774847069, "uuid": "ee4a9f5f-2bf5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.251.131:41707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774847111, "uuid": "07d56572-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.91.29:50718/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774847226, "uuid": "4c6140f1-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.129.19:49537/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774847238, "uuid": "53068a72-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.29.223.19:42623/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774847289, "uuid": "71cac9e5-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.183.22:50289/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774847347, "uuid": "948038ce-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wave-form.regionaltelemetry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774847349, "uuid": "958d14e3-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.76.132.161:40384/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774847476, "uuid": "e14d2a63-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.76.132.161:40384/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774847831, "uuid": "b47a99e6-2bf7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://remote-log.regionaltelemetry.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774848311, "uuid": "d2c040dd-2bf8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://border-gate.territoriallink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774848319, "uuid": "d7cb4cd5-2bf8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.91.29:50718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774848548, "uuid": "6041ecbd-2bf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.232.75.59:52767/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774848683, "uuid": "b09f09a1-2bf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.79.95:55183/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774848730, "uuid": "ccd9af38-2bf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proxy-edge.territoriallink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774848858, "uuid": "191c784a-2bfa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.88.129.19:49537/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774849158, "uuid": "cbedc214-2bfa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.70.227:43301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774849269, "uuid": "0e03cf19-2bfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://land-mark.territoriallink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774849689, "uuid": "080f4e3f-2bfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://site-connect.territoriallink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774849816, "uuid": "53a460c0-2bfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.171.177.193:53471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774850171, "uuid": "27b7f82f-2bfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://map-anchor.territoriallink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774850181, "uuid": "2d594a9c-2bfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.232.75.59:52767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774850227, "uuid": "4920b78b-2bfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.173.182.43:48089/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774850472, "uuid": "dad26a0d-2bfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.107.157:38819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774850617, "uuid": "31324254-2bfe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.126.176:49667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774850648, "uuid": "43985b60-2bfe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://reach-base.territoriallink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774850717, "uuid": "6cf4cc40-2bfe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.35.45:48777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851068, "uuid": "3e247dfe-2bff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://public-serv.municipalmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851548, "uuid": "5c7511f3-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://town-council.municipalmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851728, "uuid": "c74a0a41-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://web-captcha.cc/verification.google", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851729, "uuid": "c875739f-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.193.224:41136/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851730, "uuid": "c88eaaf3-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.200.69:58778/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "cfe1aac9-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "cfe1f7d5-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.i686", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "cfe21331-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "cfe4891d-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.arm6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "cfe674d5-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "cfed0e7c-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.spc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "cfed400d-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "cffbc293-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "cffceb88-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "d00b00b6-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851742, "uuid": "d01daf36-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://206.189.22.92/windyloveyou/windy.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851924, "uuid": "3c7321c6-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.170.125:44892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774851968, "uuid": "56ba0a4a-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://citizen-dev.municipalmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852026, "uuid": "7935cf78-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.209:5000/storage/a068699010734e6d.jar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852026, "uuid": "7936034d-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.209:5000/storage/06d00e3f266343c0.jar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852026, "uuid": "794a7912-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.209:5000/storage/3d98f65dbb44491e.jar", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852026, "uuid": "794f0e61-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.209:5000/storage/c68c92c7b9974302.enc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852027, "uuid": "7a102505-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.153.34.209:5000/storage/6f675d51cb094e0f.enc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852045, "uuid": "84442c72-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.252.70:54627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852045, "uuid": "84563ee9-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.170.125:44892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852160, "uuid": "c92fc2ff-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.79.95:55183/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852280, "uuid": "10b14067-2c02-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.35.45:48777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852387, "uuid": "508467c7-2c02-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth-trust.municipalmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852703, "uuid": "0cb0d18c-2c03-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.126.176:49667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852813, "uuid": "4e7475f6-2c03-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.43.117:52605/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852868, "uuid": "6f2e9d89-2c03-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://code-index.municipalmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852930, "uuid": "942b92b1-2c03-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.44.175.24:32910/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774852948, "uuid": "9ee6bb24-2c03-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.138.135.27:45248/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774853227, "uuid": "453b7bd3-2c04-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://24.44.175.24:32910/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774853351, "uuid": "8ebd3bf5-2c04-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://form-builder.municipalmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774853419, "uuid": "b75ae9c6-2c04-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.200.69:58778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774853424, "uuid": "ba553e0c-2c04-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.20:45431/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774853830, "uuid": "ac28e5f5-2c05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-duty.infrastructurehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854248, "uuid": "a5b6005b-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.224.208.190:45821/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854250, "uuid": "a68367dd-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:53178/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854250, "uuid": "a68d5605-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.54.107:57753/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854250, "uuid": "a6c862c7-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.239.213.228:59874/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854250, "uuid": "a6e735f3-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.166.152.13:39662/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854250, "uuid": "a6fa601e-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.80.129:42972/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854250, "uuid": "a7044e9d-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.233.77.23:52328/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854250, "uuid": "a705d841-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.80.129:42972/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854252, "uuid": "a7ef06ff-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solid-state.infrastructurehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854262, "uuid": "ade746d2-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.217.174:36511/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854262, "uuid": "adf14e7d-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://149.3.101.219:55900/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854309, "uuid": "ca143062-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://212.39.79.233:1998/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854310, "uuid": "ca439b26-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.54.107:57753/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854310, "uuid": "caabf6cf-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.233.77.23:52328/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854311, "uuid": "cafcd8cc-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.179.12:35585/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854312, "uuid": "cc0353f1-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.183.140.157:55888/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854367, "uuid": "ecb9c101-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.43.117:52605/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854367, "uuid": "ecba0540-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.179.12:35585/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854367, "uuid": "eccfb2b7-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.76.184:53155/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854427, "uuid": "1083c59f-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.140.44.96:38108/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854550, "uuid": "59988ab7-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.17:33548/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854551, "uuid": "5a2c1ed9-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.76.40:50184/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854728, "uuid": "c3770689-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-build.infrastructurehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854728, "uuid": "c39236eb-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.14:57739/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854847, "uuid": "0a9d679f-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jieqaingdaolu.com/tc.php", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854861, "uuid": "12fbeda0-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jieqaingdaolu.com/tc/FVDEHqlqwcSnwX33.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854965, "uuid": "51171a9a-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/hiddenbin/boatnet.arc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854965, "uuid": "51171d5a-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/huhu/titanjr.", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854965, "uuid": "511ec95c-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://143.20.185.225/dl.php", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854965, "uuid": "51228128-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/hiddenbin/boatnet.i468", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854965, "uuid": "513afe4b-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.83.138.59:25884/nz.i468", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854966, "uuid": "51530f36-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.191.32/nuclear.mipsel", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854967, "uuid": "5209f27e-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/titanjr.", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854967, "uuid": "5219ae73-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.i468", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854967, "uuid": "5220ce56-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.spc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854968, "uuid": "529d0265-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.60.206/arm7k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854968, "uuid": "529d44fa-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.60.206/mpslk", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854968, "uuid": "529d4829-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.60.206/mipsk", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854968, "uuid": "529d60c0-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.60.206/arm5k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854968, "uuid": "53087556-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.139.104.122/arc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854980, "uuid": "59fc0918-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.191.32/nuclear.sparc", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854980, "uuid": "5a08f2e6-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.191.32/nuclear.i586", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854980, "uuid": "5a13a926-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.252.236/windyloveyou/windy.i468", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854980, "uuid": "5a1c9a95-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.138/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854980, "uuid": "5a1c9b83-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.138/hiddenbin/boatnet.i686", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854981, "uuid": "5a5b904d-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.127.34.138/hiddenbin/boatnet.i468", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774854981, "uuid": "5ac98be2-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:36170/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "783f0240-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.163.151.12/all.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "7864850e-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.arm7", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "786568ed-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.arm5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "786aa576-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.i686", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "78808ccc-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.arc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "78809ded-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.mips", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "788206a0-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.arm6", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "78826496-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855031, "uuid": "78951c83-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.mpsl", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "789be7d2-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "78ac1535-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "78ad43ab-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.ppc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "78aebf68-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.arm64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "78afe2b3-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "78b0b673-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lemperluvkurayami/kurayami.arm", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "78c27a67-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://142.248.80.144/lol.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855032, "uuid": "78e9c8f8-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.142.209.47/x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855035, "uuid": "7a8c3ab0-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://cn.bossjy.cc.cd/bot.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855057, "uuid": "87e3dd22-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.52.53:59977/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855088, "uuid": "9a08cda1-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://147.45.60.206/arm4k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855088, "uuid": "9a12028c-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://192.227.183.143/ISIS.sh", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855148, "uuid": "bdeb0715-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://asset-track.infrastructurehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855159, "uuid": "c4a4b2e2-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.43.2:37369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855329, "uuid": "29b32fcd-2c09-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.80.14:57739/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855630, "uuid": "dd93757b-2c09-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://power-plant.infrastructurehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774855690, "uuid": "00e87931-2c0a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.140.17:33548/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856047, "uuid": "d5d6165b-2c0a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://resource-api.infrastructurehub.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856301, "uuid": "6d7cf017-2c0b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.246.43.2:37369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856363, "uuid": "92353797-2c0b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.34.149:43406/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856410, "uuid": "adf57397-2c0b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumvale8is.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856470, "uuid": "d2140451-2c0b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.123.237:36170/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856714, "uuid": "63766c69-2c0c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.22:59415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774856828, "uuid": "a7996181-2c0c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vvave3-gate.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774857083, "uuid": "3f775c5f-2c0d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.85:51445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774857142, "uuid": "62765a02-2c0d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.238.186:42774/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774857247, "uuid": "a12c94ca-2c0d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://80tlyi.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774857375, "uuid": "ed85c257-2c0d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.20:45431/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774857609, "uuid": "7912661f-2c0e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://icegold.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774857858, "uuid": "0d6bdd1a-2c0f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.34.149:43406/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774857919, "uuid": "3173625a-2c0f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.42.4:37422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774857968, "uuid": "4f18caf9-2c0f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zencrestal2.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774858266, "uuid": "00cabdfe-2c10-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:57652/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774858337, "uuid": "2afb3dd8-2c10-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.19.85:51445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774858388, "uuid": "4948c82f-2c10-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://aftwizk.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774858811, "uuid": "454ea1b6-2c11-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://n73pw.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774858925, "uuid": "89793e61-2c11-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7411337060/M94scZj.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774859169, "uuid": "1a7e938d-2c12-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cell-plate.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774859527, "uuid": "efe6aeff-2c12-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:58288/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774859591, "uuid": "162e79f6-2c13-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://screennotify.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774859659, "uuid": "3eca4694-2c13-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:57652/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774859859, "uuid": "b6247ab0-2c13-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.44.136.227:44665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774860011, "uuid": "1059740b-2c14-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wgyinknm.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774860130, "uuid": "578870fe-2c14-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.9.140:39071/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774860196, "uuid": "7f14f831-2c14-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.205.114:46464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774860310, "uuid": "c2d4e427-2c14-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.22:59415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774860368, "uuid": "e5714989-2c14-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tal-venal.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774860789, "uuid": "e03368f9-2c15-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vmcs.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774861148, "uuid": "b64ff295-2c16-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://runwaypublic.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774861328, "uuid": "2167f61a-2c17-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.1.26.13:58399/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774861628, "uuid": "d439d081-2c17-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.9.140:39071/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774861628, "uuid": "d4501d60-2c17-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://filteglob.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774861989, "uuid": "ab68cfb2-2c18-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hyper-4uth.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774862349, "uuid": "82268e06-2c19-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://riverrefine.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774862669, "uuid": "410188ac-2c1a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.78.58:40510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774862830, "uuid": "a0b2c401-2c1a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wpx3375n.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863128, "uuid": "529df36e-2c1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.228:58118/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863187, "uuid": "75f5281a-2c1b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://11kzvq.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863547, "uuid": "4c103612-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://subtlsegme.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94a92636-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Lordjos16/PixelBuddy/raw/refs/heads/main/PixelBuddy/Buddy_Pixel_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94aa14b1-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Lordjos16/PixelBuddy/refs/heads/main/PixelBuddy/Buddy_Pixel_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94ae2a66-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aybibilalkali/nokia-book/refs/heads/master/03/minik/examples/book-nokia-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94bd613d-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Inevitable-Code101/game-hub/refs/heads/main/game-site-fire/src/components/UpdateInfo/hub_game_chloropalladates.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94c02c91-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Dannyjune79/TangNano20K-Pooyan/refs/heads/main/TN20K-Pooyan/schematics/Pooyan-Tang-Nano-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94c02db6-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aybibilalkali/blooket/refs/heads/master/thrasonic/Software_perfoliation.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94dc32da-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Inevitable-Code101/game-hub/raw/refs/heads/main/game-site-fire/src/components/UpdateInfo/hub_game_chloropalladates.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94ea2e7e-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aybibilalkali/nokia-book/raw/refs/heads/master/03/minik/examples/book-nokia-2.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94ea3e45-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Dannyjune79/TangNano20K-Pooyan/raw/refs/heads/main/TN20K-Pooyan/schematics/Pooyan-Tang-Nano-v3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863669, "uuid": "94f29f6d-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aybibilalkali/blooket/raw/refs/heads/master/thrasonic/Software_perfoliation.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863787, "uuid": "db667d11-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/skullzoinks/RealDesk/refs/heads/main/lib/features/xbox/Real_Desk_nostrum.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774863787, "uuid": "db88b75a-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/skullzoinks/RealDesk/raw/refs/heads/main/lib/features/xbox/Real_Desk_nostrum.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774864029, "uuid": "6b9dc1e1-2c1d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lwvkfb.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774864088, "uuid": "8ed6a9a5-2c1d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.212.47:44383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774864350, "uuid": "2b0764e8-2c1e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.72.156:54607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774864390, "uuid": "4294ffdf-2c1e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://urbanvoya.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774864641, "uuid": "d816057c-2c1e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.249.145:36319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774864749, "uuid": "186a8277-2c1f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://refineterminal.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774864886, "uuid": "6aa3a3c7-2c1f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.110:53432/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774865229, "uuid": "36f3da70-2c20-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://echo-draf.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774865230, "uuid": "3785e783-2c20-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.134:55375/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774865425, "uuid": "ab7c3174-2c20-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.212.47:44383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774865588, "uuid": "0cdaa69d-2c21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nortideis.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774865658, "uuid": "36ab86d1-2c21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.109.126.23:42718/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774865841, "uuid": "a3711aeb-2c21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.93.183:58434/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774865948, "uuid": "e331f468-2c21-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://crimsonpublish.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774866133, "uuid": "51d7633f-2c22-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.249.145:36319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774866369, "uuid": "de78e530-2c22-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quordra3os.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774866685, "uuid": "9a8c89b6-2c23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.233.192:37282/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774866728, "uuid": "b443f9ee-2c23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://offecargo.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774866728, "uuid": "b4556c10-2c23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.88.134:55375/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774866741, "uuid": "bc3ffd4f-2c23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.175.206.228:52107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774866745, "uuid": "be445edd-2c23-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.9.66.50:44161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774867212, "uuid": "d482dc79-2c24-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ligh-stric.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774867226, "uuid": "dd1fef21-2c24-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.59:35343/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774867459, "uuid": "680a4efa-2c25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.175.206.228:52107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774867628, "uuid": "cca36dfb-2c25-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.203.107:48310/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774867763, "uuid": "1ceea738-2c26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.9.66.50:44161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774867869, "uuid": "5c19027d-2c26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://we5ohkh2.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774867995, "uuid": "a79ed676-2c26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.149.110:53432/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774868051, "uuid": "c88b9fda-2c26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://anch0r1-route.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774868062, "uuid": "cf7654c8-2c26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.208.233:58632/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774868120, "uuid": "f1b06651-2c26-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.169:55780/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774868229, "uuid": "3321b124-2c27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.166.152.13:39662/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774868235, "uuid": "36b8e8e7-2c27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.32.189:57819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774868303, "uuid": "5f48ef89-2c27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.226.220:36161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774868346, "uuid": "78c07260-2c27-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-p0rt.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774868769, "uuid": "74e32a67-2c28-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://3d1t-node.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774869128, "uuid": "4a86a085-2c29-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.168:56411/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774869198, "uuid": "747bbf71-2c29-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.208.233:58632/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774869428, "uuid": "fdd83240-2c29-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://decode-stead.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774869615, "uuid": "6d198b03-2c2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quick8-chain.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774869688, "uuid": "98c987b5-2c2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.241.122:47701/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774869851, "uuid": "f9e05e10-2c2a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.189.194:43188/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774869909, "uuid": "1c9570f3-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://guarmea.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774869980, "uuid": "46a3b77b-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.32.189:57819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870228, "uuid": "da6f1b58-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://62c013c91f7f8152044efae44a432404.r2.cloudflarestorage.com/urllink/www-win-sogou-com/windows/SG.Setupbiyi.5.16.11.5lln.zip", "Tag": [ { "name": "Cybercrime", "colour": "#6b27d1", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870228, "uuid": "da82cd4d-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/dl/NfAfGNH6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870228, "uuid": "da9e392e-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/K9rHTWbB", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870228, "uuid": "da9ed18a-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/dl/WXsGaMUd", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870229, "uuid": "dace41a6-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.shanmaocnhingkong-oss.top/sogou_pinyin_x64_v20_win.zip", "Tag": [ { "name": "Cybercrime", "colour": "#6b27d1", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870229, "uuid": "dae90df2-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/GVqMqePp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870231, "uuid": "dc2a1970-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/GVqMqePp", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870233, "uuid": "dd6060f1-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.242.236:44360/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870234, "uuid": "ddc79ff1-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.48.17:42209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870234, "uuid": "dde570f0-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.108:48948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870326, "uuid": "1515ae02-2c2c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.1.224.168:56411/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870389, "uuid": "3aadfed1-2c2c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wu4747.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870696, "uuid": "f158e9b4-2c2c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.1.39:52817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870747, "uuid": "0fb30f53-2c2d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bzknn.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870878, "uuid": "5df12465-2c2d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.140.168:40007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774870879, "uuid": "5e3c06a6-2c2d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.114.101:33257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774871108, "uuid": "e71a0aaf-2c2d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-0rch.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774871172, "uuid": "0d6227c0-2c2e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.241.122:47701/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774871346, "uuid": "74f1f9f6-2c2e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.1.39:52817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774871467, "uuid": "bd3112d2-2c2e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tranrur.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774871729, "uuid": "592081f5-2c2f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.125.55.230:53868/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774871829, "uuid": "947e5615-2c2f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.54.132:42333/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774871834, "uuid": "97721034-2c2f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.243.126:40716/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774871887, "uuid": "b72fc623-2c2f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://geyseropti.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774871897, "uuid": "bd3942ce-2c2f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.140.168:40007/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774872078, "uuid": "28ddab20-2c30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.30.247:48830/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774872313, "uuid": "b551c22c-2c30-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://yyin.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774872622, "uuid": "6d9d6468-2c31-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.114.101:33257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774872918, "uuid": "1dd8e8bf-2c32-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.9.151:48261/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774873028, "uuid": "5f57e87c-2c32-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://95abc92.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774873210, "uuid": "cbe5295b-2c32-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://runti5-flow.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774873329, "uuid": "12dff108-2c33-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.54.132:42333/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774873398, "uuid": "3c0e779a-2c33-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.168.208.78:50607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774873510, "uuid": "7e6f3f26-2c33-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proto-tru5ted.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774873929, "uuid": "78acdc4a-2c34-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dispatchmemory.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874288, "uuid": "4e4317a1-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://50ravelv.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874408, "uuid": "9625dd37-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874410, "uuid": "973fac9b-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.pythonhosted.org/packages/83/b7/5e93f51cd157cc8cf5599f387e587a1926d50fc7e54fb76d04b342341fb0/telnyx-4.87.1-py3-none-any.whl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874410, "uuid": "9756f2f6-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://files.pythonhosted.org/packages/5a/73/87cb49434a1f89f253819b81993d3a4e65186ae08b013b9825633ceac359/telnyx-4.87.2-py3-none-any.whl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874651, "uuid": "26881c84-2c36-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.255.10.22:39229/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874724, "uuid": "52498b1b-2c36-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.199.0:34975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874724, "uuid": "527e8be7-2c36-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.199.0:34975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874767, "uuid": "6bd7c237-2c36-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://atom-mount.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774874774, "uuid": "702b7e93-2c36-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.60.190:52268/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774875308, "uuid": "ae39a3b5-2c37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solline0en.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774875309, "uuid": "af0f854c-2c37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.37.247:42610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774875312, "uuid": "b076d3e5-2c37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.24.36.14:45423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774875427, "uuid": "f573a689-2c37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.244.178:33070/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774875433, "uuid": "f88d3d1f-2c37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.244:46113/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774875443, "uuid": "feeabf5b-2c37-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.37.247:42610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774875488, "uuid": "19c667af-2c38-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cybdh.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774875737, "uuid": "ade11f09-2c38-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.91.184:34368/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774875910, "uuid": "15117c88-2c39-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://margingene.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774876333, "uuid": "11211d21-2c3a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://field-shoa.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774876689, "uuid": "e5b98f23-2c3a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sceneretainer.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774876809, "uuid": "2d085eac-2c3b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.123.214:38824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774876872, "uuid": "525e619e-2c3b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.255.10.22:39229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774876872, "uuid": "52c2c7a8-2c3b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.27.244:46113/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774876927, "uuid": "738199bd-2c3b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.227.73:39641/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877111, "uuid": "e148970f-2c3b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dpvvgwcg.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877171, "uuid": "048d358a-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.91.184:34368/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877238, "uuid": "2c9e8e86-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.230.64:40914/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877410, "uuid": "93435286-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.197.135:59233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877466, "uuid": "b4d6a953-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.227.73:39641/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877475, "uuid": "ba22a08c-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.249.70.76:58474/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877476, "uuid": "bac6e702-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.40.108:51272/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877528, "uuid": "d96e7890-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://39vhl.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877827, "uuid": "8c018579-2c3d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://creekcargo.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774877896, "uuid": "b4a9b148-2c3d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.36.9.175:34472/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878131, "uuid": "40eb0bac-2c3e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://capitclou.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878143, "uuid": "4861cbbd-2c3e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.139.3.232:33999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878552, "uuid": "3c0f93e4-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hmndwk.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878554, "uuid": "3d069d6c-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.253.80.140:48921/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878558, "uuid": "3fa41ee1-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.154.221:48996/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878619, "uuid": "641b7f72-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.60.98:53927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878620, "uuid": "6427df19-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.123.214:38824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878624, "uuid": "6718b141-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.234.148:38506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878740, "uuid": "abf88684-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.193.230.64:40914/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878740, "uuid": "ac1ee23a-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.184.58:54300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774878849, "uuid": "ecef63b5-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gl0ss-grid.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879089, "uuid": "7bf47863-2c40-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.249.70.76:58474/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879148, "uuid": "9f604cd7-2c40-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.197.135:59233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879148, "uuid": "9f6229ea-2c40-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.36.9.175:34472/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879213, "uuid": "c609564f-2c40-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sh1f-signal.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879509, "uuid": "7654fae0-2c41-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://yx16l.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879514, "uuid": "791cce35-2c41-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.70.234.148:38506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879632, "uuid": "bfd86c1b-2c41-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.231.39:59176/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879689, "uuid": "e1b6f959-2c41-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.154.221:48996/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879759, "uuid": "0b978d91-2c42-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.243.126:40716/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879869, "uuid": "4d24748a-2c42-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vzdgys.starforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774879936, "uuid": "74d86e38-2c42-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.205.21:50825/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774880169, "uuid": "ffdfdb53-2c42-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d3ep-forge.br1ghtmere.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774880420, "uuid": "953869ce-2c43-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.9.165.160:39420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774880424, "uuid": "97fb925f-2c43-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.77.252:44311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774880530, "uuid": "d6bca08f-2c43-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tru37-point.oakwhisper.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774880888, "uuid": "ac033a9f-2c44-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://roy4l-node.foxrunet.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881079, "uuid": "1e347499-2c45-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.121:60566/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881130, "uuid": "3c5d4192-2c45-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.71.254:43827/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881188, "uuid": "5ef1eb2d-2c45-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://delta6-zone.stormglade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881255, "uuid": "86ddb362-2c45-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.107.157:38819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881375, "uuid": "ceb9ea4e-2c45-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.231.39:59176/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881548, "uuid": "35e68442-2c46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solcresten3.n0vabrook.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881688, "uuid": "893ed3b7-2c46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.188.70:40729/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881737, "uuid": "a699556e-2c46-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.77.252:44311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881909, "uuid": "0d1a0ee0-2c47-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://voyageinspect.cl0verpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774881969, "uuid": "305f44f1-2c47-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.184.58:54300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774882100, "uuid": "7ed35d71-2c47-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.240.179:45532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774882278, "uuid": "e8f117de-2c47-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.9.165.160:39420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774882304, "uuid": "f8862069-2c47-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dtlxmaf.cl0verpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774882458, "uuid": "53e55b9b-2c48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.127.227.31:39783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774882577, "uuid": "9add7b3a-2c48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tri-coreen.cl0verpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774882627, "uuid": "b8b23102-2c48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.124.121:60566/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774882700, "uuid": "e48b9c87-2c48-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.71.254:43827/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774882930, "uuid": "6d41621a-2c49-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zennexos5.cl0verpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883167, "uuid": "fab71d11-2c49-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.198.173:40937/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883229, "uuid": "1fa52962-2c4a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://scrip8-grid.cl0verpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883527, "uuid": "d164d86a-2c4a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.58.229.39:47979/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883590, "uuid": "f6d43999-2c4a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://handleramber.cl0verpeak.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883723, "uuid": "4644b8b9-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883723, "uuid": "465aa4a3-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883724, "uuid": "4671be19-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883724, "uuid": "4671c09c-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883725, "uuid": "474818ed-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883776, "uuid": "65b25b1c-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883781, "uuid": "686660c2-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883781, "uuid": "68667ded-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883781, "uuid": "68667ec1-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883781, "uuid": "68ae5708-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883781, "uuid": "68c33e64-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883781, "uuid": "68c395c1-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883784, "uuid": "6a8ed1b3-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.19/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883887, "uuid": "a8112df7-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nor-lineor.mossbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883903, "uuid": "b1550e23-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.240.179:45532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774883965, "uuid": "d64e73cc-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.27.164:35329/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774884250, "uuid": "80738018-2c4c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://r6cp.mossbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774884444, "uuid": "f399349b-2c4c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.127.227.31:39783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774884547, "uuid": "315db349-2c4d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gb3r.mossbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774884912, "uuid": "0a87c6a9-2c4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wavrapi.mossbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774885274, "uuid": "e254cb2d-2c4e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wkilqh.mossbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774885574, "uuid": "95196a9a-2c4f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://falldusk.mossbyte.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774885629, "uuid": "b62a26db-2c4f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.99.210:38056/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774885640, "uuid": "bce5b9b4-2c4f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.94.218:51427/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774885700, "uuid": "e069e1c2-2c4f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.75.37:59704/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774885934, "uuid": "6c24b547-2c50-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.73.17.206:37496/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774886176, "uuid": "fc3eb209-2c50-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://poster-port.cinderbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774886349, "uuid": "632c372c-2c51-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://talline1is.cinderbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774886429, "uuid": "93112fc3-2c51-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.64:59824/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774886529, "uuid": "ce5c465f-2c51-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ziuyacdv.cinderbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774886790, "uuid": "6a608eb2-2c52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.238.136:53916/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774886955, "uuid": "ccb12b74-2c52-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://coralsolid.cinderbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887129, "uuid": "33f5b457-2c53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.99.210:38056/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887145, "uuid": "3de0289b-2c53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.189.26.217:50759/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887248, "uuid": "7b116a7c-2c53-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://velvetautu.cinderbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887612, "uuid": "5404489d-2c54-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://triforgea4.cinderbay.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887623, "uuid": "5abed35b-2c54-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.75.37:59704/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887682, "uuid": "7de5540b-2c54-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.64:59824/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887739, "uuid": "9fa158b1-2c54-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.75.70:57804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774887978, "uuid": "2e769852-2c55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://normesh0a.glowhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774888032, "uuid": "4e35fef8-2c55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.29.101:37405/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774888032, "uuid": "4e3ab396-2c55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.29.101:37405/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774888270, "uuid": "dc89d203-2c55-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quatrigge.glowhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774888630, "uuid": "b2c66d71-2c56-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fz01ob.glowhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774888758, "uuid": "ff6ed5a0-2c56-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.218.108:48948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774888931, "uuid": "667d900a-2c57-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pin3-point.glowhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889003, "uuid": "90f6affe-2c57-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.189.26.217:50759/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889287, "uuid": "3a97a191-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pr1v-zone.glowhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889309, "uuid": "47863639-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://163.142.95.5:46073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889467, "uuid": "a57f5456-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-eb752c5fc6fd4e21973d399eafb1844c.r2.dev/adobe_updated_27.092.3029.vbs", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889467, "uuid": "a5bcc5d4-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://careersconnect.work/STARTGO18.03.2026V/GOSTARTWORKSVBY.JPG", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889468, "uuid": "a699c0be-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mlbkn.com/miumiu.7z", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889469, "uuid": "a6aca377-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jem-mialwe.net/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889469, "uuid": "a6bcd7d2-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://inomanliner.org/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889470, "uuid": "a7595435-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://getzoomupdate.com/download.php", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889470, "uuid": "a764265b-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://epgoldsecurity.com/XWormClient2.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889470, "uuid": "a7c78506-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://jem-mialwe.com/WORDPRESS%202026.zip", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889471, "uuid": "a7e19d85-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://epgoldsecurity.com/ShadowClient.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889471, "uuid": "a84950d1-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wet-envelope-beam-laser.trycloudflare.com/ombmh.dat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "a885c89b-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.98.182.49/beta_evaluation_distribute_v4.4.1.bat", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "a88ff9dc-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://epgoldsecurity.com/XWormClient.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "a8b696dd-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wet-envelope-beam-laser.trycloudflare.com/rechung.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889472, "uuid": "a8f4a259-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://epgoldsecurity.com/ShadoClient.exe", "Tag": [ { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889474, "uuid": "aa1b8c14-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://careersconnect.work/MYPHOTOMSI.JPG", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889652, "uuid": "13ef71e3-2c59-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-pur3.glowhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889889, "uuid": "a14ae72f-2c59-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://r0ug3-stack.v7lora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774889901, "uuid": "a840bd69-2c59-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.147.72:36735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774890009, "uuid": "e90c5c9c-2c59-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.127.75.70:57804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774890198, "uuid": "5988ecff-2c5a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.227.7:50551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774890311, "uuid": "9d0dec27-2c5a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://surnm5-route.v7lora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774890319, "uuid": "a180633d-2c5a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.153.171:51092/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774890669, "uuid": "723c3235-2c5b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sswms.v7lora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774891016, "uuid": "4121f9f5-2c5c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tdp72.v7lora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774891332, "uuid": "fd7abb99-2c5c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tr4ck-frame.v7lora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774891688, "uuid": "d1af5b83-2c5d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.vame.be/ftp/FrvbzpNxf99.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774891689, "uuid": "d1f3131a-2c5d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.vame.be/kgb/ENCRYPT.Ps1", "Tag": [ { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774891759, "uuid": "fbec528c-2c5d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.147.72:36735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774891820, "uuid": "204796b8-2c5e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.153.171:51092/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774891877, "uuid": "41f51a50-2c5e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://loyalreel.v7lora.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774892114, "uuid": "cf802717-2c5e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solforgeor4.thorncairn.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774892180, "uuid": "f6d0cc12-2c5e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.157.219.158:32778/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774892350, "uuid": "5c7661af-2c5f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vgge57l.thorncairn.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774892649, "uuid": "0e2fbd96-2c60-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ze2975m.thorncairn.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774892949, "uuid": "c10ec54d-2c60-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kfem.thorncairn.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774892960, "uuid": "c7c7db5f-2c60-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.24.6:47501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774893125, "uuid": "2a63baeb-2c61-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8317177049/xG9J7pF.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774893309, "uuid": "979d3f95-2c61-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.35.226:43409/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774893312, "uuid": "998ba138-2c61-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://clif-lagoo.thorncairn.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774893613, "uuid": "4cd7fe43-2c62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.248.222:36165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774893731, "uuid": "93274104-2c62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumlithor9.thorncairn.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774893732, "uuid": "93d900eb-2c62-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.157.219.158:32778/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774893916, "uuid": "01686dfe-2c63-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.178.98:51918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774893970, "uuid": "2196cc96-2c63-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arraynarrow.fabledrift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774894040, "uuid": "4b593942-2c63-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.24.6:47501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774894282, "uuid": "db7ec6d1-2c63-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.178.98:51918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774894334, "uuid": "fa7fa6b0-2c63-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://securclea.fabledrift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774894628, "uuid": "a9fee50b-2c64-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tpqicucp.fabledrift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774894989, "uuid": "812b4359-2c65-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://storyfros.fabledrift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774895126, "uuid": "d2e69bb7-2c65-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.186.52:39461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774895347, "uuid": "56adcd97-2c66-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://quorspireum8.fabledrift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774895359, "uuid": "5d7c4acd-2c66-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.184.248.222:36165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774895708, "uuid": "2dc56b71-2c67-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sub-hau1.fabledrift.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774895957, "uuid": "c25d1644-2c67-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.186.52:39461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774896010, "uuid": "e18bbd5f-2c67-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cr4ft9-core.skyl1tfern.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774896078, "uuid": "0a5ab463-2c68-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.40.108:51272/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774896253, "uuid": "7282e47a-2c68-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:55433/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774896368, "uuid": "b75748bf-2c68-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gatewayraven.skyl1tfern.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774896379, "uuid": "bdbb888f-2c68-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.254.236.2:50089/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774896500, "uuid": "05bf802c-2c69-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.254.212:34465/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774896968, "uuid": "1c9b24ab-2c6a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5tud1o6-path.skyl1tfern.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774897087, "uuid": "63bc1cb7-2c6a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://89n5b.skyl1tfern.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774897326, "uuid": "f242f4c4-2c6a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.212.129:48177/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774897390, "uuid": "1800c065-2c6b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cur1o1-phase.skyl1tfern.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774897398, "uuid": "1cf69d73-2c6b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.105.170:52231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774897687, "uuid": "c95a0033-2c6b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://po5a.skyl1tfern.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774898048, "uuid": "a09025fd-2c6c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://brokerpasture.mistlatch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774898236, "uuid": "107d1314-2c6d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.254.236.2:50089/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774898409, "uuid": "77e38168-2c6d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkmark4et.mistlatch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774898665, "uuid": "10314eba-2c6e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.105.194:37177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774898710, "uuid": "2b2d0f96-2c6e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mossroad.mistlatch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899127, "uuid": "23a303e9-2c6f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.212.129:48177/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899128, "uuid": "246dab10-2c6f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fabric-plate.mistlatch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899137, "uuid": "2977d969-2c6f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://210.97.100.192:60672/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899258, "uuid": "71779130-2c6f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.206.14.6:60299/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899368, "uuid": "b315a2e7-2c6f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://2lripcrt.mistlatch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899555, "uuid": "2266dc67-2c70-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:55433/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899668, "uuid": "663a1c53-2c70-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://partnerreb.mistlatch.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774899746, "uuid": "948ac2b0-2c70-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.53.247:48402/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774900044, "uuid": "45e36efb-2c71-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.19.48:59708/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774900089, "uuid": "60bf19e0-2c71-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://exp05e-crest.silvershade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774900387, "uuid": "128591fa-2c72-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wolfpas.silvershade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774900391, "uuid": "14ae40ce-2c72-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.206.14.6:60299/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774900637, "uuid": "a7b296c4-2c72-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.53.247:48402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774900689, "uuid": "c6769e9e-2c72-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5udd-glow.silvershade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774901114, "uuid": "c3abf498-2c73-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://social-hau.silvershade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774901347, "uuid": "4f01ec3c-2c74-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.19.48:59708/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774901410, "uuid": "741ce241-2c74-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://blen-reef.silvershade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774901648, "uuid": "021cae5b-2c75-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.225.225:38495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774901710, "uuid": "273533a3-2c75-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://primemicrobe.silvershade.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774902069, "uuid": "fd350d25-2c75-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://erpqy89.quillspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774902427, "uuid": "d2ce5bc6-2c76-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-forgeex.quillspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774902788, "uuid": "a9b7ab03-2c77-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nuaeftf.quillspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774903328, "uuid": "eb6bbf7b-2c78-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m3rg-hinge.quillspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774903510, "uuid": "583580d9-2c79-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bin4ry-ring.quillspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774903808, "uuid": "09c7d4e2-2c7a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://open-mesh.quillspire.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774903810, "uuid": "0b0edbad-2c7a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.91.143:51727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774904048, "uuid": "98c372bd-2c7a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://arkmeshet6.ashenkite.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774904064, "uuid": "a24a1416-2c7a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.198.91:45909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774904410, "uuid": "70382428-2c7b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://uyr3.ashenkite.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774904828, "uuid": "69d5a17e-2c7c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cr4t-flow.ashenkite.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774905128, "uuid": "1c860575-2c7d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pixelsola.ashenkite.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774905260, "uuid": "6b03d502-2c7d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.91.143:51727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774905324, "uuid": "918e7045-2c7d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.211:49050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774905425, "uuid": "cdbbd8c0-2c7d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.204.133:33884/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774905428, "uuid": "cf77fc26-2c7d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://185ez3.ashenkite.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774905561, "uuid": "1ebf0d47-2c7e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.162.33:42595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774905787, "uuid": "a538afc1-2c7e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://rpaizy.ashenkite.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774905807, "uuid": "b14fa641-2c7e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.55.183:38418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774906092, "uuid": "5b2489d3-2c7f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.140.44.96:38108/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774906150, "uuid": "7dde6bcd-2c7f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://core-engine.vectorforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774906327, "uuid": "e71e87ac-2c7f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.211.48:47296/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774906402, "uuid": "13a2882e-2c80-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.162.33:42595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774906455, "uuid": "33741da2-2c80-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://load-stress.vectorforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774906812, "uuid": "082465f4-2c81-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://api-endpoint.vectorforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774906818, "uuid": "0c0ee657-2c81-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.224.245:40361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774907114, "uuid": "bc0738d3-2c81-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://data-pipeline.vectorforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774907227, "uuid": "ff6a10d3-2c81-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.204.133:33884/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774907470, "uuid": "901c59a8-2c82-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://build-deploy.vectorforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774907481, "uuid": "96ae9b85-2c82-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.230.226:45244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774907837, "uuid": "6b2ed7aa-2c83-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.204.242:38970/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774908015, "uuid": "d51f8563-2c83-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://auth-proxy.vectorforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774908130, "uuid": "19f6c4d9-2c84-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://safe-harbor.nexushaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774908490, "uuid": "f00f89b3-2c84-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cloud-vault.nexushaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774908560, "uuid": "1a2af752-2c85-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.4.198:41494/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774908744, "uuid": "8783cd45-2c85-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.224.245:40361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774908849, "uuid": "c69760f9-2c85-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://guest-access.nexushaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "574d7577-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnx86_64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "574f6ad4-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnsh2xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "574f762a-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnsh4xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "574f7cb5-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnaarch64xnxn", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "574f7cff-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnriscv64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "57501f3b-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxni386xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "57504045-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnmicroblazexnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "5751f4c0-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnm68kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "57586f85-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnriscv32xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "5762241b-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnor1kxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909092, "uuid": "576fb2c4-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnmipsxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909093, "uuid": "577bbf9c-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnloongarch64xnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909149, "uuid": "796a5149-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/bins/xnxnxnxnxnxnxnxnpowerpcxnxn", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909217, "uuid": "a1b3971c-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://backup-node.nexushaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909388, "uuid": "07bd9a49-2c87-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.106.252:56161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909514, "uuid": "52f55ef6-2c87-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-link.nexushaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909754, "uuid": "e20a3e51-2c87-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.238.31:44957/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774909871, "uuid": "2751acdc-2c88-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://relay-server.nexushaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774910109, "uuid": "b59f4d8b-2c88-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.106.252:56161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774910111, "uuid": "b6b6b6c0-2c88-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-speed.stellarflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774910529, "uuid": "aff7569c-2c89-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wave-monitor.stellarflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774910719, "uuid": "21292080-2c8a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:35449/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774910890, "uuid": "86ad9f2e-2c8a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://beam-target.stellarflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774911129, "uuid": "158dd4b5-2c8b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pulse-gate.stellarflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774911552, "uuid": "118a305e-2c8c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://drift-sensor.stellarflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774911849, "uuid": "c2868ea0-2c8c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ion-stream.stellarflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774911931, "uuid": "f34b5290-2c8c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.81.110:40922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774911973, "uuid": "0c981225-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.55.183:38418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912214, "uuid": "9c411c81-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bio-growth.orbitbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912274, "uuid": "bf94b91c-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:35449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912274, "uuid": "bfb0a88b-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912274, "uuid": "bfb0c72d-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912274, "uuid": "bfb0d5ae-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912274, "uuid": "bfb70a3a-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912274, "uuid": "bfc30eca-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912337, "uuid": "e52e71a1-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.4.198:41494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912337, "uuid": "e52f2d0b-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912337, "uuid": "e530cbd7-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912337, "uuid": "e5347df9-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912337, "uuid": "e534d3fa-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912337, "uuid": "e53a0d6b-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//arc", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912337, "uuid": "e543e8ca-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912337, "uuid": "e545e5dd-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64//i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912513, "uuid": "4e782c73-2c8e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://eco-system.orbitbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774912870, "uuid": "22f71127-2c8f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://green-node.orbitbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774913171, "uuid": "d695aa00-2c8f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://plant-logic.orbitbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774913532, "uuid": "ad7626ac-2c90-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://root-cluster.orbitbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774913891, "uuid": "835b46d9-2c91-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://leaf-proxy.orbitbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774913895, "uuid": "85c46203-2c91-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.12.204.206:58288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774914005, "uuid": "c7bae06e-2c91-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/638251020/aMe4P4o.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774914074, "uuid": "f072cf5d-2c91-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:35582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774914127, "uuid": "106382c7-2c92-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.244.178:33070/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774914189, "uuid": "3555403f-2c92-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-rule.axiomforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774914318, "uuid": "81e6b3f5-2c92-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.24.36.6:57191/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774914614, "uuid": "32b7fa2a-2c93-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://proof-check.axiomforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774914911, "uuid": "e38006cd-2c93-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-theory.axiomforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774915148, "uuid": "71091c46-2c94-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://main-frame.axiomforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774887127, "uuid": "32f830bc-2c53-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.189.26.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774865645, "uuid": "2e9e3e6c-2c21-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.109.126.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774859824, "uuid": "a0ff2e39-2c13-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.44.136.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774893605, "uuid": "487bcd36-2c62-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.184.248.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774896485, "uuid": "fcc334d2-2c68-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.254.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774850584, "uuid": "1dab62cd-2bfe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.58.126.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774852928, "uuid": "92954e8a-2c03-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.138.135.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774875305, "uuid": "ac811ed1-2c37-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.24.36.14", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774914306, "uuid": "7b243dbe-2c92-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.24.36.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774872908, "uuid": "17de13a5-2c32-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.9.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774882444, "uuid": "4bd292fd-2c48-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.127.227.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774899245, "uuid": "69aabbc8-2c6f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.206.14.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774864626, "uuid": "cf7f4b64-2c1e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.249.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854246, "uuid": "a4a86151-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.239.213.228", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854246, "uuid": "a4aa96d4-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.233.77.23", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774868045, "uuid": "c4fdaef2-2c26-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.208.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774903804, "uuid": "0780c327-2c7a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.91.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774900026, "uuid": "3b22fad6-2c71-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.19.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842366, "uuid": "fb50d5e7-2bea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.167.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774867207, "uuid": "d189405c-2c24-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.195.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774837025, "uuid": "8befa56f-2bde-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.235.145", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774892946, "uuid": "bf341252-2c60-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.24.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774885626, "uuid": "b433f77e-2c4f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.99.210", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774836845, "uuid": "20ba3376-2bde-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.15.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774833424, "uuid": "29b088c6-2bd6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.144.234", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883525, "uuid": "cfe81ad4-2c4a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.58.229.39", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774893906, "uuid": "fbbd29c2-2c62-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.178.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774857065, "uuid": "345ec39c-2c0d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.19.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855025, "uuid": "74f3836a-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.52.53", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774899725, "uuid": "87b6ae29-2c70-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.215.53.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843265, "uuid": "1306ecc5-2bed-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.50.138", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774868286, "uuid": "550745c3-2c27-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.226.220", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774833545, "uuid": "71a5fc9d-2bd6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.219.150.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774866725, "uuid": "b261940a-2c23-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.175.206.228", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774878546, "uuid": "3859ff78-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.253.80.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774868226, "uuid": "30ecf5a8-2c27-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.32.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774875305, "uuid": "ac81826f-2c37-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.37.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863185, "uuid": "746ccba0-2c1b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "11kzvq.oakwhisper.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774909745, "uuid": "dc22e8d5-2c87-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.238.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774849145, "uuid": "c3f9fb68-2bfa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.70.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774866725, "uuid": "b2614884-2c23-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.9.66.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774906806, "uuid": "04da22ab-2c81-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.224.245", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840264, "uuid": "16a3ed29-2be6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.130.205.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854246, "uuid": "a4a56ffa-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.217.174", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774844224, "uuid": "4eb60c65-2bef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.245.32.38", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889885, "uuid": "9f059a87-2c59-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.147.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774888028, "uuid": "4c45f012-2c55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.29.101", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870864, "uuid": "55768bee-2c2d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.114.101", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774860125, "uuid": "54d7d6b1-2c14-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.9.140", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831385, "uuid": "69fececd-2bd1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.101.142", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854307, "uuid": "c91079ce-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.129.179.12", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843685, "uuid": "0d8ca602-2bee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.234.174.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774879625, "uuid": "bb9db895-2c41-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.231.39", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774909384, "uuid": "057454ac-2c87-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.106.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774852807, "uuid": "4acd76f2-2c03-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.43.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774850707, "uuid": "66e5df27-2bfe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.35.45", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854965, "uuid": "50e44980-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "142.248.80.144", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854246, "uuid": "a4aaa307-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "149.3.101.219", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774835405, "uuid": "c6937e58-2bda-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "160.179.232.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889285, "uuid": "38ff9a9c-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "163.142.95.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774877884, "uuid": "ae0361f0-2c3d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.36.9.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774838046, "uuid": "ec3f7822-2be0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.150.114.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870864, "uuid": "55769044-2c2d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.140.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774885686, "uuid": "d8572a78-2c4f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.75.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774880406, "uuid": "8d23ca2c-2c43-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.77.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774871825, "uuid": "9293d673-2c2f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.243.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774880406, "uuid": "8d23d498-2c43-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.9.165.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774847285, "uuid": "6f183980-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.226.183.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874406, "uuid": "94d0a68d-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.64", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889466, "uuid": "a5038d6b-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.98.182.49", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774836364, "uuid": "0215374a-2bdd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.204.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774876925, "uuid": "72379840-2c3b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.227.73", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774871825, "uuid": "92939e1b-2c2f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.122.54.132", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774832407, "uuid": "cb15da25-2bd3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.236.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774881065, "uuid": "1606cd41-2c45-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.124.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774869675, "uuid": "90a164af-2c2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.241.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854246, "uuid": "a4a5ca68-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.80.129", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774878126, "uuid": "3dbcf92d-2c3e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.139.3.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774905424, "uuid": "cceee07d-2c7d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185ez3.ashenkite.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854965, "uuid": "50e48272-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.163.151.12", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774885626, "uuid": "b433c2b6-2c4f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.94.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870223, "uuid": "d7bcf2c2-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.48.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854547, "uuid": "580b3cb8-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.127.76.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774847045, "uuid": "e04cbe51-2bf5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.251.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774877465, "uuid": "b3cb640a-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.139.40.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774897324, "uuid": "f0d83bb9-2c6a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.140.212.129", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774877407, "uuid": "9153002f-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.197.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774882085, "uuid": "75e63aee-2c47-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.240.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855145, "uuid": "bc7fc216-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.246.43.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774852928, "uuid": "92950d32-2c03-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "24.44.175.24", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774877226, "uuid": "254b34db-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.193.230.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774878726, "uuid": "a38be7bb-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.184.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774864085, "uuid": "8cf20155-2c1d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.212.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774908544, "uuid": "10d1e2fe-2c85-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.4.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854725, "uuid": "c1d684df-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.80.14", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774904045, "uuid": "96fdea25-2c7a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.217.198.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831264, "uuid": "2221eb13-2bd1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.109.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774901644, "uuid": "fff7bddd-2c74-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.225.225", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774833306, "uuid": "e372230b-2bd5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.227.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874765, "uuid": "6a6af2f5-2c36-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.60.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774862645, "uuid": "32d0025d-2c1a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.78.58", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774899365, "uuid": "b16150d6-2c6f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "2lripcrt.mistlatch.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874707, "uuid": "485cd3da-2c36-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.199.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774878608, "uuid": "5d552fbc-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.70.234.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774847345, "uuid": "92d9efed-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "37.76.132.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830306, "uuid": "e6e6acc5-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.83.138.59", "Tag": [ { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774911905, "uuid": "e3f3b9f0-2c8c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.81.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840625, "uuid": "edf48194-2be6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.87.239.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774847225, "uuid": "4b66c1fb-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.88.129.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774864866, "uuid": "5e28d7f7-2c1f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.149.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774877525, "uuid": "d79e8338-2c3c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39vhl.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774868766, "uuid": "733de8fd-2c28-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "3d1t-node.n0vabrook.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774835945, "uuid": "08031511-2bdc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.202.103.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774851908, "uuid": "32c95c4a-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.170.125", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774869837, "uuid": "f1564239-2c2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.189.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774879925, "uuid": "6e7444e6-2c42-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.205.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856345, "uuid": "879cebc7-2c0b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.34.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870223, "uuid": "d87173d8-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.218.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774895105, "uuid": "c64030bf-2c65-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.186.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774890185, "uuid": "51a34889-2c5a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.227.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774875726, "uuid": "a7532360-2c38-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.91.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774846207, "uuid": "ec9b48b6-2bf3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.224.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774907465, "uuid": "8d76b1d3-2c82-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.230.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774898646, "uuid": "04b3859f-2c6e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.105.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774850465, "uuid": "d6c1b887-2bfd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.107.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774848665, "uuid": "a5b04d1e-2bf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.79.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774851727, "uuid": "c6e1d0de-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.200.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774836065, "uuid": "4ffd071e-2bdc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.208.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854246, "uuid": "a4a5b444-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.54.107", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774907826, "uuid": "64640817-2c83-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.204.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774885925, "uuid": "66b0d7a9-2c50-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.73.17.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874285, "uuid": "4c8e4c2c-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "50ravelv.oakwhisper.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774829345, "uuid": "aa2282c3-2bcc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.138.113", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774881665, "uuid": "7b7987b5-2c46-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.188.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774865826, "uuid": "9a847498-2c21-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.93.183", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854307, "uuid": "c9118eff-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.183.140.157", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774864325, "uuid": "1c1d2c17-2c1e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.72.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774838046, "uuid": "ec3fbeb6-2be0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.96.141.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774896964, "uuid": "1a53ec13-2c6a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5tud1o6-path.skyl1tfern.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774900685, "uuid": "c45cc3d7-2c72-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5udd-glow.silvershade.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774886765, "uuid": "5b7b4df2-2c52-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.238.136", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774857125, "uuid": "58a99688-2c0d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.238.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774881125, "uuid": "39b83c3a-2c45-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.71.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774838585, "uuid": "2db65f77-2be2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.90.238", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870224, "uuid": "d874b48c-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "62c013c91f7f8152044efae44a432404.r2.cloudflarestorage.com" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774834925, "uuid": "a863ef05-2bd9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "69.173.182.43", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774839906, "uuid": "4113056e-2be5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "78.172.181.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774857245, "uuid": "9fbc2b3e-2c0d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "80tlyi.starforge.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774909085, "uuid": "53375a34-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.168.69.118", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "RISC-V", "colour": "#6c2ec8", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774896365, "uuid": "b5843d7c-2c68-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.254.236.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854425, "uuid": "0f61263e-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.140.44.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854246, "uuid": "a4a65882-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.166.152.13", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774897085, "uuid": "625a1764-2c6a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "89n5b.skyl1tfern.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854246, "uuid": "a4a65510-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "90.224.208.190", "Tag": [] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774873025, "uuid": "5d70ddb1-2c32-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "95abc92.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774837448, "uuid": "88180cb1-2bdf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "admin-panel.sectoralcontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774858385, "uuid": "47afa298-2c10-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "aftwizk.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774868045, "uuid": "c50fe34c-2c26-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "anch0r1-route.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774906806, "uuid": "04e3f827-2c81-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "api-endpoint.vectorforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830006, "uuid": "3483b259-2bce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "area-scanner.metropolitangrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774898406, "uuid": "75c43e1d-2c6d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkmark4et.mistlatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774904045, "uuid": "9714fb0d-2c7a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arkmeshet6.ashenkite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774893966, "uuid": "1f19ad3f-2c63-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "arraynarrow.fabledrift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855146, "uuid": "bc91140a-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "asset-track.infrastructurehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874765, "uuid": "6a74290f-2c36-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "atom-mount.oakwhisper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774908007, "uuid": "d0816f04-2c83-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "auth-proxy.vectorforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774852384, "uuid": "4ed455cc-2c02-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "auth-trust.municipalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774909208, "uuid": "9c641cac-2c86-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "backup-node.nexushaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854725, "uuid": "c1f6fd0e-2c07-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-build.infrastructurehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774914906, "uuid": "e09971d3-2c93-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-theory.axiomforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774910886, "uuid": "843260a1-2c8a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "beam-target.stellarflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774903506, "uuid": "55e822fe-2c79-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bin4ry-ring.quillspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774912207, "uuid": "979d82e5-2c8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bio-growth.orbitbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774901406, "uuid": "71c33737-2c74-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "blen-reef.silvershade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830365, "uuid": "0a4bc2c5-2bcf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "block-sensor.metropolitangrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774848307, "uuid": "d0427ae0-2bf8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "border-gate.territoriallink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774898045, "uuid": "9ea1895b-2c6c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "brokerpasture.mistlatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774907465, "uuid": "8d82efbf-2c82-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "build-deploy.vectorforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870744, "uuid": "0de9bffe-2c2d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bzknn.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774878126, "uuid": "3dc5e979-2c3e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "capitclou.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889466, "uuid": "a5274a13-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "careersconnect.work" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774859166, "uuid": "18f57deb-2c12-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cell-plate.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774851966, "uuid": "5549ae7e-2c01-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "citizen-dev.municipalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774829406, "uuid": "ce753926-2bcc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "city-monitor.metropolitangrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774893307, "uuid": "96bb1677-2c61-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "clif-lagoo.thorncairn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774908484, "uuid": "ed139cb1-2c84-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cloud-vault.nexushaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855028, "uuid": "7687d91b-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cn.bossjy.cc.cd" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774852865, "uuid": "6d86a049-2c03-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "code-index.municipalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774833306, "uuid": "e37ef976-2bd5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "coord-sync.precisemapnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774886947, "uuid": "c7ca7921-2c52-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "coralsolid.cinderbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774906145, "uuid": "7a9bb6ae-2c7f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "core-engine.vectorforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774896007, "uuid": "dfed8d2d-2c67-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cr4ft9-core.skyl1tfern.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774904825, "uuid": "67fff604-2c7c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cr4t-flow.ashenkite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774877824, "uuid": "8a37aff4-2c3d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "creekcargo.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774865945, "uuid": "e1c182bc-2c21-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "crimsonpublish.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774897385, "uuid": "15234f0a-2c6b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cur1o1-phase.skyl1tfern.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774875485, "uuid": "180e9e56-2c38-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cybdh.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774880166, "uuid": "fdf6e9dc-2c42-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d3ep-forge.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774846925, "uuid": "98b0dce0-2bf5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-packet.regionaltelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774907106, "uuid": "b75e2d3c-2c81-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "data-pipeline.vectorforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774869426, "uuid": "fc19c3bd-2c29-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "decode-stead.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774881185, "uuid": "5d8529a5-2c45-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "delta6-zone.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774873926, "uuid": "769ce7a2-2c34-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dispatchmemory.oakwhisper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774877106, "uuid": "de4a2b05-2c3b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dpvvgwcg.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774832706, "uuid": "7dccecd0-2bd4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "drift-control.urbanflowmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774911544, "uuid": "0cd4d50a-2c8c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "drift-sensor.stellarflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774882265, "uuid": "e0e09e29-2c47-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dtlxmaf.cl0verpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774865227, "uuid": "356aefb4-2c20-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "echo-draf.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774912505, "uuid": "496eb17e-2c8e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "eco-system.orbitbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889466, "uuid": "a521c080-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ecurmas.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889466, "uuid": "a51d513b-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "epgoldsecurity.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774902066, "uuid": "fb64da8f-2c75-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "erpqy89.quillspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774900086, "uuid": "5f1f05db-2c71-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "exp05e-crest.silvershade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774899125, "uuid": "225ac3b0-2c6f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fabric-plate.mistlatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774885571, "uuid": "93b658f5-2c4f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "falldusk.mossbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774841407, "uuid": "bf79a9c0-2be8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fiber-route.linearbackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774845965, "uuid": "5cb531e1-2bf3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "field-report.regionaltelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774876325, "uuid": "0c65e202-2c3a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "field-shoa.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774874406, "uuid": "94ded192-2c35-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "files.pythonhosted.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774861625, "uuid": "d2a9dba7-2c17-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "filteglob.oakwhisper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843685, "uuid": "0d9797c1-2bee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "filter-proc.centralizedduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774844166, "uuid": "2c3035be-2bef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-guide.centralizedduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774833006, "uuid": "3086ced8-2bd5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-master.urbanflowmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774853348, "uuid": "8d0040a1-2c04-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "form-builder.municipalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774888626, "uuid": "b077895d-2c56-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fz01ob.glowhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774896365, "uuid": "b5970dfd-2c68-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gatewayraven.skyl1tfern.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774884545, "uuid": "30008640-2c4d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gb3r.mossbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889466, "uuid": "a52a2139-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "getzoomupdate.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774871884, "uuid": "b56cad12-2c2f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "geyseropti.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774878845, "uuid": "eaba0a04-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gl0ss-grid.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774912865, "uuid": "2050ab4b-2c8f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "green-node.orbitbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774869906, "uuid": "1ac2ac84-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "guarmea.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774908844, "uuid": "c3804668-2c85-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "guest-access.nexushaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883586, "uuid": "f438b1df-2c4a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "handleramber.cl0verpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774853827, "uuid": "aab456ff-2c05-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-duty.infrastructurehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774878548, "uuid": "399474c0-2c3f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hmndwk.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774861926, "uuid": "860ac4ca-2c18-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hyper-4uth.oakwhisper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774857606, "uuid": "772ef3ba-2c0e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "icegold.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842725, "uuid": "d13a0615-2beb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "inlet-valve.centralizedduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889466, "uuid": "a55a25fa-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "inomanliner.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774829106, "uuid": "1bd22130-2bcc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "instant-msg.velocityterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774911845, "uuid": "c011d98a-2c8c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ion-stream.stellarflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889468, "uuid": "a6a03e25-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jem-mialwe.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889466, "uuid": "a55c665a-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jem-mialwe.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854846, "uuid": "09c9806b-2c08-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jieqaingdaolu.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870224, "uuid": "d871dd16-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jkem45.x98665.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774892946, "uuid": "bf4a36de-2c60-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kfem.thorncairn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774849265, "uuid": "0b9ffd78-2bfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "land-mark.territoriallink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774834025, "uuid": "8fb6f5b2-2bd7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "layer-stack.precisemapnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774913884, "uuid": "7fa3fa3c-2c91-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "leaf-proxy.orbitbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774867207, "uuid": "d19c808c-2c24-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ligh-stric.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774910106, "uuid": "b38ed3ae-2c88-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-speed.stellarflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774839964, "uuid": "63bea4cc-2be5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "link-secure.linearbackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774836725, "uuid": "d91673e0-2bdd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load-buffer.districtbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774906445, "uuid": "2d93c792-2c80-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "load-stress.vectorforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774835344, "uuid": "a228cb31-2bda-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "local-cache.districtbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774914185, "uuid": "32bd89ff-2c92-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-rule.axiomforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774891867, "uuid": "3c2d2d5f-2c5e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "loyalreel.v7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774893666, "uuid": "6c4424a3-2c62-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumlithor9.thorncairn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856406, "uuid": "abe48868-2c0b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumvale8is.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774864025, "uuid": "6936d31b-2c1d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lwvkfb.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774903324, "uuid": "e96c18f2-2c78-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m3rg-hinge.quillspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774915145, "uuid": "6eca5a2a-2c94-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-frame.axiomforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774841885, "uuid": "dce88c4c-2be9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "main-frame.linearbackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774850166, "uuid": "244050d8-2bfd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "map-anchor.territoriallink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774875905, "uuid": "126eb825-2c39-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "margingene.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774902424, "uuid": "d1011f6b-2c76-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-forgeex.quillspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774871105, "uuid": "e4e57860-2c2d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-0rch.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889647, "uuid": "113ed82b-2c59-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-pur3.glowhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889466, "uuid": "a522ef6e-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mlbkn.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774898708, "uuid": "29ad365e-2c6e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mossroad.mistlatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774858807, "uuid": "42c146c3-2c11-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "n73pw.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774842366, "uuid": "fb5c1f77-2bea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "node-carrier.linearbackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883885, "uuid": "a680697e-2c4b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nor-lineor.mossbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774887971, "uuid": "2a1855fe-2c55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "normesh0a.glowhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774865585, "uuid": "0b2bbd04-2c21-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nortideis.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774902785, "uuid": "a80697e6-2c77-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nuaeftf.quillspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774866725, "uuid": "b27009fc-2c23-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "offecargo.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774903805, "uuid": "0796fcc6-2c7a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "open-mesh.quillspire.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774843206, "uuid": "f02ba44b-2bec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "outlet-node.centralizedduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774899665, "uuid": "641c7d26-2c70-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "partnerreb.mistlatch.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840745, "uuid": "35344a95-2be7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-bridge.linearbackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870224, "uuid": "d856d8e5-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pesktop1.oss-cn-hongkong.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774888928, "uuid": "6471ad0f-2c57-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pin3-point.glowhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774905126, "uuid": "1b14cc47-2c7d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pixelsola.ashenkite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774913165, "uuid": "d2b01b0a-2c8f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "plant-logic.orbitbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774897685, "uuid": "c7ec0e42-2c6b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "po5a.skyl1tfern.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774833725, "uuid": "dcdaae8c-2bd6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "point-atlas.precisemapnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774886166, "uuid": "f645586b-2c50-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "poster-port.cinderbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774855626, "uuid": "dab554c5-2c09-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "power-plant.infrastructurehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889285, "uuid": "39296f48-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pr1v-zone.glowhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774844647, "uuid": "4b057416-2bf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pressure-io.centralizedduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774901707, "uuid": "2568e8c5-2c75-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "primemicrobe.silvershade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774914606, "uuid": "2d7c1965-2c93-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proof-check.axiomforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774868344, "uuid": "775389e1-2c27-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-p0rt.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774873507, "uuid": "7ccf51d9-2c33-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proto-tru5ted.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774848727, "uuid": "ca8ce409-2bf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "proxy-edge.territoriallink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889466, "uuid": "a51d934e-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-eb752c5fc6fd4e21973d399eafb1844c.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774851065, "uuid": "3c49c6e3-2bff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "public-serv.municipalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774832465, "uuid": "ee15b48b-2bd3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pulse-check.urbanflowmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774911125, "uuid": "12e8f467-2c8b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pulse-gate.stellarflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774888268, "uuid": "db04ab14-2c55-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quatrigge.glowhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774836066, "uuid": "5004fae4-2bdc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "queue-manager.districtbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774828865, "uuid": "8c171cc9-2bcb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick-step.velocityterminal.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774869611, "uuid": "6a9422d0-2c2a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quick8-chain.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774866366, "uuid": "dc9cb48b-2c22-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quordra3os.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774895345, "uuid": "550e3f4d-2c66-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "quorspireum8.fabledrift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889885, "uuid": "9f28c769-2c59-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "r0ug3-stack.v7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774884246, "uuid": "7e02da84-2c4c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "r6cp.mossbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774850645, "uuid": "41ebfb47-2bfe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "reach-base.territoriallink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774864746, "uuid": "16a5ee5d-2c1f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "refineterminal.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774836364, "uuid": "02220e4f-2bdd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "relay-point.districtbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774909865, "uuid": "23fc8fb0-2c88-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "relay-server.nexushaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774838164, "uuid": "32f6c35e-2be1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "remote-desk.sectoralcontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774847827, "uuid": "b2a21682-2bf7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "remote-log.regionaltelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856045, "uuid": "d484bdd0-2c0a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "resource-api.infrastructurehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774862345, "uuid": "7fc9d3ae-2c19-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "riverrefine.oakwhisper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774913525, "uuid": "a9a86476-2c90-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "root-cluster.orbitbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774880885, "uuid": "aaa4cba7-2c44-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "roy4l-node.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774905784, "uuid": "a3b71fbc-2c7e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "rpaizy.ashenkite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774873207, "uuid": "c9d6b94f-2c32-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "runti5-flow.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774861145, "uuid": "b49d2341-2c16-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "runwaypublic.oakwhisper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774908126, "uuid": "17285981-2c84-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "safe-harbor.nexushaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774834325, "uuid": "42a3ee0a-2bd8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "scale-vector.precisemapnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774876687, "uuid": "e415ceb9-2c3a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sceneretainer.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774859585, "uuid": "12dd17ce-2c13-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "screennotify.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774883225, "uuid": "1d48cde7-2c4a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "scrip8-grid.cl0verpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774894326, "uuid": "f5f10ba3-2c63-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "securclea.fabledrift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774909507, "uuid": "4eba86e1-2c87-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-link.nexushaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774879207, "uuid": "c26e1d1b-2c40-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sh1f-signal.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774846506, "uuid": "9f1e806f-2bf4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "signal-box.regionaltelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774837025, "uuid": "8bfe2a5f-2bde-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-archive.districtbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774849686, "uuid": "065a3b36-2bfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "site-connect.territoriallink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774901110, "uuid": "c1a1e9e6-2c73-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "social-hau.silvershade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774881545, "uuid": "33f0804e-2c46-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solcresten3.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774892109, "uuid": "cc7d392c-2c5e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solforgeor4.thorncairn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774854249, "uuid": "a617f708-2c06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solid-state.infrastructurehub.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774875305, "uuid": "ac8b785a-2c37-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solline0en.oakwhisper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774890666, "uuid": "70b079ff-2c5b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sswms.v7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774894985, "uuid": "7ea5b008-2c65-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "storyfros.fabledrift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831684, "uuid": "1cab90c2-2bd2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "stream-audit.urbanflowmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774829706, "uuid": "8179a21f-2bcd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "street-logic.metropolitangrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774895706, "uuid": "2c37f262-2c67-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sub-hau1.fabledrift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774863544, "uuid": "4a8e11cd-2c1c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "subtlsegme.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774832285, "uuid": "82b89c4a-2bd3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "surge-protect.urbanflowmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774890306, "uuid": "99f9549e-2c5a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "surnm5-route.v7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774839064, "uuid": "4b80bb88-2be3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "switch-gear.sectoralcontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774838645, "uuid": "516fb3d0-2be2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "system-core.sectoralcontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774860364, "uuid": "e2cdfe39-2c14-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tal-venal.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774886346, "uuid": "613eb49f-2c51-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "talline1is.cinderbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774839544, "uuid": "692fe1d6-2be4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "task-logic.sectoralcontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774890966, "uuid": "235dbb1b-2c5c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tdp72.v7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774835707, "uuid": "7a232099-2bdb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "temp-storage.districtbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774835106, "uuid": "1421adb6-2bda-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "topo-render.precisemapnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774851545, "uuid": "5a89c081-2c00-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "town-council.municipalmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774894625, "uuid": "a82cfcbe-2c64-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tpqicucp.fabledrift.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774891329, "uuid": "fb9f4183-2c5c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tr4ck-frame.v7lora.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831324, "uuid": "45ca9736-2bd1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "traffic-api.urbanflowmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774871465, "uuid": "bbb67b43-2c2e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tranrur.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774882505, "uuid": "7055d30a-2c48-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tri-coreen.cl0verpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774887608, "uuid": "51c20e65-2c54-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "triforgea4.cinderbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774880527, "uuid": "d54e7f20-2c43-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tru37-point.oakwhisper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774840985, "uuid": "c479f710-2be7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trunk-line.linearbackbone.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774845125, "uuid": "67eea317-2bf1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tunnel-sync.centralizedduct.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870224, "uuid": "d82f89e9-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tyuiyyuiuwee.oss-ap-southeast-1.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774837806, "uuid": "5d7871f3-2be0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "unit-command.sectoralcontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889468, "uuid": "a6890ed4-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "update50lite.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774831085, "uuid": "b748fd69-2bd0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "urban-access.metropolitangrid.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774864385, "uuid": "3faed24e-2c1e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "urbanvoya.foxrunet.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774904406, "uuid": "6e4e8f5f-2c7b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "uyr3.ashenkite.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774887245, "uuid": "79104266-2c53-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "velvetautu.cinderbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774892348, "uuid": "5adb6219-2c5f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vgge57l.thorncairn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774834688, "uuid": "1ab82d23-2bd9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "view-finder.precisemapnode.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774860785, "uuid": "de40eb65-2c15-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vmcs.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774881907, "uuid": "0b65d94c-2c47-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "voyageinspect.cl0verpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774856825, "uuid": "a5aeac94-2c0c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vvave3-gate.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774879865, "uuid": "4ace9dd9-2c42-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vzdgys.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774847345, "uuid": "92e726ea-2bf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wave-form.regionaltelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774910525, "uuid": "ad90a7f3-2c89-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wave-monitor.stellarflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774884909, "uuid": "08b0990a-2c4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wavrapi.mossbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774867864, "uuid": "59a196cf-2c26-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "we5ohkh2.stormglade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774889468, "uuid": "a66cb53b-2c58-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wet-envelope-beam-laser.trycloudflare.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774860006, "uuid": "0dbb18ec-2c14-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wgyinknm.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774845486, "uuid": "3f3a5304-2bf2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wide-telemetry.regionaltelemetry.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774885269, "uuid": "dfd2c0f3-2c4e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wkilqh.mossbyte.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774900385, "uuid": "113118b5-2c72-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wolfpas.silvershade.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774862826, "uuid": "9e35f1c3-2c1a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wpx3375n.oakwhisper.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870386, "uuid": "38c349bc-2c2c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wu4747.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774870224, "uuid": "d81f586d-2c2b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wwiiss.oss-eu-west-1.aliyuncs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774879506, "uuid": "74bd310b-2c41-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "yx16l.n0vabrook.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774872310, "uuid": "b34d24b8-2c30-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "yyin.br1ghtmere.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774892645, "uuid": "0bbbfe12-2c60-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ze2975m.thorncairn.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774857966, "uuid": "4d6fd887-2c0f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zencrestal2.starforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774882865, "uuid": "4693ecc8-2c49-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zennexos5.cl0verpeak.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774886526, "uuid": "cca36b20-2c51-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ziuyacdv.cinderbay.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774830665, "uuid": "bcca78e4-2bcf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zone-portal.metropolitangrid.in.net" } ] } }