{ "Event": { "published": true, "date": "2026-02-04", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-04", "timestamp": 1770250522, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "b63e660b-82b0-4e33-9178-d04f46b3e1ad", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ecc3d02-015c-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770163220, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163220, "uuid": "000b75f9-3582-4956-a022-3eaecac03783", "comment": "Malware payload (Mirai)", "value": "4c325fbfb6d2191593bd319f282a5727", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163220, "uuid": "da2d6fba-d13b-4c49-a256-5c8bb149bde2", "comment": "Malware payload (Mirai)", "value": "e7b3c9c00f79eca8e50a27c0462ff5f0cd3ac4148200508aa77b3eef21fd1cbb", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163220, "uuid": "074fa82c-ed43-4061-9895-38ded475e016", "value": "T174532A99F401AF7CF81FDAFA4012490EF521A24496430F3AAF77FD936CB10A58E179", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163220, "uuid": "4813ca38-57e9-49e2-9aee-3e7c1a7245f2", "value": "768:yoTaP/6dXlyLewEudk9vn5XTk1fb9e8YZPKst9jYO882YxN+5xidImJRPY6X5Z:yXXsXlsEuSwD8PKI8O88RW5xiamJ55Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163220, "uuid": "3c7b0b82-3fa1-4396-9d0a-cc8725d67feb", "value": 63620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163220, "uuid": "b1b2920d-a6e3-4e6d-8891-10a26f65f4fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1770163457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163457, "uuid": "756f4749-a63b-4a71-884d-0008435fe1d8", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163457, "uuid": "d1f15675-7fb2-411a-965e-8206c7e84b40", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163457, "uuid": "cb3e518a-bc23-4e0f-bff7-5354fa519a41", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163457, "uuid": "43471b9f-8c12-4de6-99de-03e984100463", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163457, "uuid": "0e4eb42b-1798-4aec-a699-2f0f3efa57ce", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3cfb0c14-015d-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770163539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163539, "uuid": "f23cbf12-504e-4790-8c2a-9f3e5f8051d5", "comment": "Malware payload (Mirai)", "value": "ba1da33e785667a7c974cf201842131f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163539, "uuid": "836aaa19-ae55-4747-ae3e-357557e2ec65", "comment": "Malware payload (Mirai)", "value": "3827b451ef2e340544ddc982fb95e1374e7855af91b390c6990ef41f32c534df", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163539, "uuid": "08fcab06-7ac6-400b-8129-190dc3c27f33", "value": "T187A31270D184737AF37CD83745BC064B29EB0EF4868F6258371AACD1E950B4B16E71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163539, "uuid": "7328eb32-4ff6-423e-bfd3-0090f979ff7f", "value": "1536:Z5XtVlB/yLQ7iLSPCxpifLyoKmpckdXhAQvoH72vtogIWKfiNNI/S8nJDuV+LcXR:Z55B/WQ7iGHy+9Xu4s7Cr3Kfib2JDm+M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163539, "uuid": "b71c5d3a-62ab-4165-b166-45ea178598c1", "value": 98044, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163539, "uuid": "89c75c60-6bd1-4634-8405-4aad5e15d041", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "564e4405-015d-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770163581, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163581, "uuid": "695ba451-d361-4250-a034-0079597ebe34", "comment": "Malware payload (Mirai)", "value": "702533fab587ed53686a0ff4ce8e6497", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163581, "uuid": "6ed10ef4-d0fb-4921-91a9-e51ba403270c", "comment": "Malware payload (Mirai)", "value": "9df4a603a83c9fc399d22132f8ce9eef2abaef135e6207aeb761f8bf6dd264d0", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163581, "uuid": "9edc51c8-d20d-45bb-9538-7cfa3ae27a7b", "value": "T18D6318DA7CC5C602C5F061B2BB1E51CE375643B8E3E2B153CD19AB29670F8A70A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163581, "uuid": "1aac97fd-6a9d-45de-a914-e7984b05b970", "value": "768:EZmB7Q97T7dfPaosDB74PhCLru6Zxn1s0nRDDbHdyvB2V+VXRBsbHdxTRWIhZZAD:J7TzyIh/Y01FzTVKXY4lDDYV6llXHvj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163581, "uuid": "846aeba8-7855-4c1a-85e9-601def754118", "value": 71080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163581, "uuid": "58a75c1c-da00-448d-8f9c-0e2cdca085a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9f3463c5-015d-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770163703, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163703, "uuid": "949cbe6b-4c1d-4e81-8878-3ff2bb12ed67", "comment": "Malware payload (Mirai)", "value": "2d1c666931f4c9907e41504318245fa6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163703, "uuid": "29f8f537-b2e1-435b-8050-613871b86a46", "comment": "Malware payload (Mirai)", "value": "12b540d69a606db64291149c694c84e81f3ceca263f40f35fbd4b15bcd79e562", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163703, "uuid": "d9a564bb-a5ac-4968-9d6a-4de15bc12cb8", "value": "T19353F11342870711D25854FF6AECB90F4861E51AADB04B72B7697D3CBE82E745B0CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163703, "uuid": "9aeb3165-b61c-4b90-bfdd-b05ec3ec3cef", "value": "1536:27Sm/Lh84xqPaku+KMUkJyj8HgGiW8X5TLOn3FlkYHacv3nouy8qqI:7xPaQz46i3X5TLOn3FlkKxXoutzI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163703, "uuid": "57e451b7-097c-407e-bc59-7a52d196cb1f", "value": 63916, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163703, "uuid": "4ddb684b-7a86-4c6e-b802-0db83818eb6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "78f5d21b-006a-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770163732, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163732, "uuid": "8f3b7f3c-e3bc-438d-b3be-3bd9f5677b83", "comment": "Malware payload", "value": "9ba3d731ce5e23ce0b395d4cf7467e04", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163732, "uuid": "bc6d8f07-77a9-45a6-b51c-2cdd077baa71", "comment": "Malware payload", "value": "1597f96869d6b8a94e112f1d6cc591e29636d622e71d70468b85a27a5dbed10f", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163732, "uuid": "1b40022c-016b-44a8-9edd-365e797e06eb", "value": "T132312CCA6B3FFCC1F9F9EB38374259C0CB57D5A089509101F558A4508D3844B5B207", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163732, "uuid": "0fed5550-2753-46f4-9c4c-749acdec5aa9", "value": "24:92XhlNrRAzHHmCD6djrIIDmjbrTikE48NqrijizH+8cCxzys9MrSVgF2IT6NV2g:9yEzHGMajrISEvFQiD6CxtgF/Hg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163732, "uuid": "d1caf1cf-c2b7-4cdd-b753-dfd69cee3c55", "value": 1594, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163732, "uuid": "689e758d-6bbd-44da-b166-38235b222238", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8486bc66-00f7-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770163783, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163783, "uuid": "b5c3b7e5-1cbb-42d0-9e1d-126fd226b8f4", "comment": "Malware payload", "value": "56417bb5f49472cec2f69c0d89b53d91", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163783, "uuid": "3e331ea6-e07d-4d29-9598-4a04105f9e00", "comment": "Malware payload", "value": "08308621e2fa81e50d033c1ddbea58741e6969e4cbd689a6e87f3c51d5b81f2f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163783, "uuid": "a9f93f12-1865-4cb9-9bc9-3cc03162c862", "value": "T18931B513D916BA22D754F27324E5701AB15531E70045E9889C0BA85AECA1BC3136B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163783, "uuid": "3fca4494-4e0d-4459-91ff-ae9d6cc46383", "value": "24:9dezvw0sbu1W7kOB4J2R5KtHIkhAN1CALLjT4hHUX1N606TTdmMPmSXWZpD4nD3J:9gzY0vWd495i/fj0hHUXT606PFPmU/n1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163783, "uuid": "951eee6b-75db-49b7-a306-be98cedcd0ef", "value": 1578, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163783, "uuid": "1c519bdd-5aa2-44a5-88ac-3907d4f787af", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d98171c3-015d-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770163801, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163801, "uuid": "a37671f7-95de-406b-88a5-7c7e416b02e1", "comment": "Malware payload (Mirai)", "value": "edbc38dbb63acdd030076aad806f1eb5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163801, "uuid": "80826547-5510-45ba-8c7f-5397e8b6c8a5", "comment": "Malware payload (Mirai)", "value": "5f310352417e71c4792bec0dd2f7ced42f2dff9d78a86189082ef639f4f31000", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163801, "uuid": "3d37c2a5-dc1b-4bd3-8f71-320d010020dd", "value": "T1EA7302C1FDD92140E87BBFA32C5C7871BEF84DCE719DA90250E89E6927195784B060", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163801, "uuid": "cc2bee68-413d-499b-bbff-6ca487f22346", "value": "1536:qdxp/AkV0OC/G2dblDisxnroD2iqno6cudjBWr/4u+qgw01WXQ:O74kV0dGslDi2cfltudjBo4u+qgwoWg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163801, "uuid": "30e0c2f1-b646-4748-be35-bd5311788660", "value": 75656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163801, "uuid": "790f4a42-019b-48cf-93a8-bf111b0b026e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5687a5bc-00f6-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770163838, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163838, "uuid": "62cc0d10-7f9b-4a6a-870f-d893dac50111", "comment": "Malware payload", "value": "c03fbc54d6c3318ec9fda8010b04e234", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163838, "uuid": "7cd12f1a-55f4-4f82-afc9-f8964324d9ab", "comment": "Malware payload", "value": "019329ecc41228151fe3d933adc8872751591852f456803ac2009cce8632c8f8", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163838, "uuid": "3e33c1fa-03a8-4cd1-8223-721e87be5585", "value": "T1ED31074BDB2D7416C205F7308CDA2C4993AC30B445A86A27C2108F08E97A291C7F23", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163838, "uuid": "9a5acd6a-0a64-43e8-b0f2-dfb1401da30d", "value": "48:917I7Oxq/di63MsO2fXzvw/ulczYLOdo511Bol+Jnfp:/I7OQ/4D2/zvw2tLOESls", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163838, "uuid": "0592d61a-dbc1-445e-85fe-58d980be3134", "value": 1571, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163838, "uuid": "80d207f9-aa3e-469b-88ac-2b644b5f8da0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2838bfee-015e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770163933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163933, "uuid": "1560bf2c-cdcb-41e7-a650-3c723522994a", "comment": "Malware payload", "value": "1e9efecca9dfc61a0aed5fa3634be180", "object_relation": "md5", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163933, "uuid": "94b56434-93ee-42ef-af4d-9a41b8204198", "comment": "Malware payload", "value": "2b65163cb782092d7018e39b9e4a6d2d56b6f934fd03e4995c9d86bb316e01d1", "object_relation": "sha256", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163933, "uuid": "d81c8ad2-c3d4-48ce-bf2f-6ea678a47120", "value": "T13CE58CB2A207FEEA566A0DACC4503D006C9958B7171252ACBE8D43DEF1AE518DDFCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163933, "uuid": "e060d96b-7ec7-4875-81d2-a27abb4b8d91", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cGMF8/RwAVnnKLl:8UixbItdTrJoFVPMvXGXdexUe/fXEa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770163933, "uuid": "87232e35-fcd2-47c4-9376-f3fb9ab91148", "value": 3201884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770163933, "uuid": "0abf2a53-ae27-49fe-b8bd-8ff604811308", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6441f501-015e-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770164034, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164034, "uuid": "18e4fd1f-1fe4-452a-a2c9-c99886b20c13", "comment": "Malware payload (Mirai)", "value": "91a85e9b8d3be6f632b604faa80e219a", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164034, "uuid": "3ba0dd36-6a0a-46a1-99f0-64dcbad2d055", "comment": "Malware payload (Mirai)", "value": "62a2fe55b09cf1558d762fecc3dc530fb4161e7713f4b84c53302cbea073b6f2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164034, "uuid": "c975b8f5-3d08-444b-a124-8d02c4981644", "value": "T14CF2F1119390F9F1E6E06D3AC5F0CB69BB5F50AEC0D93023391A01BC6DC98794B6E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164034, "uuid": "6a1e7f10-81b1-4a5a-8211-c3c1cffdd427", "value": "768:PJzirzcvl1E7CVIwV6/eYgkwS0fW+92newLwz0VeJuo3U+:d/zE7COwVceGwS0u+o5Lwz0Veh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770164034, "uuid": "625c62d8-1654-41e3-ad8b-bd58344ca992", "value": 36716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164034, "uuid": "74541a97-fc88-4449-bee0-dd644308c12e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770164122, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164122, "uuid": "d68653ce-0d02-4ea5-8eec-2f7e93976fac", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164122, "uuid": "e043e9b5-1c2c-4639-9677-3954672eeef0", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164122, "uuid": "2bb813fd-68f1-4ef5-933c-a0903525da3a", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164122, "uuid": "112c2d61-9da8-48c2-8047-f9b70b120ce0", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770164122, "uuid": "16895d07-4264-4603-91cf-42d1f91e3712", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af7c0fc8-015e-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770164160, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164160, "uuid": "9f6603e8-37fa-45f1-9873-76caecf7e2b8", "comment": "Malware payload (Mirai)", "value": "9493ce852a213d61e953777bdaca4a8f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164160, "uuid": "3e312647-1cc5-4813-ad98-6be9bb0daa10", "comment": "Malware payload (Mirai)", "value": "ff7abe97e0fc15a834ac5ec241fc5dbb76b5f40a2f7bc973a24f9f1d2c5254d3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164160, "uuid": "9fb90b14-f857-474f-8f3f-d941af7da73c", "value": "T1D383125FD104B057C93AC4FA03B656A7EEFD4EA67393C0A2E210AC474A15A383D8CD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164160, "uuid": "9b3ee6b2-f1fa-4f1f-8fb7-810b0ada59cc", "value": "1536:r7n6AClpnfyM6G+xkRQAni7t1w9mCyzpkYzEr/ItNJXUVqY7:affgGvi7t1cmCyVl+/In1UVqY7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770164160, "uuid": "b80e3dff-c43f-4f61-9be4-a2059a59dbdb", "value": 81904, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164160, "uuid": "7566ab2b-5178-4570-8225-bbaebaa7c0f8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df6f3264-015e-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770164241, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164241, "uuid": "16d4c2d7-73dc-48ce-80f2-e4dd635b8385", "comment": "Malware payload (Mirai)", "value": "8a4a2ab59a21087ef580892da63bd412", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164241, "uuid": "2a48b7ba-a295-4cf5-8f7a-7914ec80bb99", "comment": "Malware payload (Mirai)", "value": "dd46458163a1c22844a2dc8b8fefc3a220a2ff9f793758fcc2956a5b9e7a2cb3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164241, "uuid": "27a0854b-bc1a-4da4-86ee-2af7f7d8bbbd", "value": "T1E68302CD45B8BC9BC54F5C3B48BA4376AEE2A1C191985F4FC1220D90F31C54BD99E4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164241, "uuid": "5dbefc5f-466c-4bae-bc01-58e370c414a9", "value": "1536:wx9SVOrihmw2ibw0gb0Cu1rKQKVeH7SNJgFzfZyrf57hQkf:SSIihmPipH31+J4ygi17b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770164241, "uuid": "4e30021f-e163-4962-8b21-69f67b9ce731", "value": 84456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164241, "uuid": "d20ffd67-3888-4f3b-b679-ca69ed4569e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a135d595-015f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770164566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164566, "uuid": "60ba777b-f0d3-4e59-a15b-7baf32cd4380", "comment": "Malware payload (Mirai)", "value": "6b95c7f776c94c4fc9f3276a557a6b64", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164566, "uuid": "909d4c49-c56f-4832-88ad-223cc0548b4c", "comment": "Malware payload (Mirai)", "value": "554729ae1fc6a7c144dab6a0860a5930050b9a60f5277cb7744729922bd13972", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164566, "uuid": "9c0d66fe-8952-49f8-9b8c-bf5758bd4c5c", "value": "T1D3530275F1DE1A29E59F4132D5FEB362483960DA402083BACFB116FBD512EE10EED1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164566, "uuid": "8261b6e1-a9d4-4c0d-b5f0-a2c6b139f14d", "value": "1536:3A7CxBNulNPSUuTKdR7cwQix7dc6UBjBPmQhbC/Onouy8ZqJ+:wuxBNmNP5/w10c1BjBPmQe/OoutUk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770164566, "uuid": "b77360ed-46a0-4947-ab44-bea092258ced", "value": 61200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164566, "uuid": "f1c5996a-8cbc-450c-a928-becd1b0eb490", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a69d41b0-e780-11ee-b38b-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770164730, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164730, "uuid": "2500ef4b-8374-4a71-9f1c-7a654f15fb3d", "comment": "Malware payload (CoinMiner)", "value": "ca1fb1ad30189110cc225620dc537368", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164730, "uuid": "72a0a04c-c8ef-4e5c-9b83-abdbf463e80d", "comment": "Malware payload (CoinMiner)", "value": "3fde84a46aea58ba4ddb5fb0473fc756ff209ba96b1a63a2759d13b8adc01a69", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "sality", "colour": "#dbe48b", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164730, "uuid": "843a5718-ea0a-478f-85d6-15725873e7f8", "value": "T1C4563395F0806422F13D183615BA84F2B07CFCB343654A9F539E2A756D383D9263AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164730, "uuid": "de0171b3-fdfa-468a-94a1-6f5a26793e00", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164730, "uuid": "c8f08f2e-ed91-477f-926f-69bd73586c41", "value": "98304:RLNSThOfTCiFBXmfFs+JhTpCVoR8oMEOJ6Ty3RvX+A0eVObApY:bBfTCiUsBVSLOJgyBG3KTp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770164730, "uuid": "49d38183-fa62-44cf-a603-39bcf3a8ad01", "value": 6227230, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164730, "uuid": "7b2178ba-bd1b-444b-afda-05a41969b5b8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd13c6a1-015b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770164747, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164747, "uuid": "bc5e5319-ef54-46b1-af23-2a7822823e90", "comment": "Malware payload (Mirai)", "value": "66e4cb00321301f58ec62ef7ba0df1fc", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164747, "uuid": "54264778-be1b-428c-8aec-9462674a10b5", "comment": "Malware payload (Mirai)", "value": "0d88c5f393929db72e529e56d7b0bd7102a060d589d57437040492fc7690763e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164747, "uuid": "2754b3bb-8dcd-4067-b690-eb137cf05f05", "value": "T1187302B0E700A2728BE459F28D90574D3A629FF67EA5CA61A1308FFCB45FA71745C3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164747, "uuid": "51712fba-6f9e-4c80-8605-62bcc6c02cd0", "value": "1536:Uw6mi4dNEHsyF1x1os+IR3INMf+Q0zH1g2HVn602OZo:UMKsyF3/jhIif+Hz/1n602B", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770164747, "uuid": "ea151b14-2aac-41fd-ab01-c2d94bff599b", "value": 76620, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164747, "uuid": "8375c24e-2efe-439e-8ee9-d4498ded8312", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74dc60a5-0160-11f1-8b2a-82aee05be84a", "comment": "Malware payload (SVCStealer)", "timestamp": 1770164921, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164921, "uuid": "b0d22b09-68ea-4219-8b7a-0dc60a2806af", "comment": "Malware payload (SVCStealer)", "value": "c126a40421282998d195a56b1deca44a", "object_relation": "md5", "Tag": [ { "name": "01x02x2026", "colour": "#7782a1", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164921, "uuid": "7579068f-521e-4ab5-af87-60b50fb25a50", "comment": "Malware payload (SVCStealer)", "value": "f7be8d2bed84b6477e37a0ba20546cd6e88f39b71ab47783e5237112891f5882", "object_relation": "sha256", "Tag": [ { "name": "01x02x2026", "colour": "#7782a1", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false }, { "name": "SVCStealer", "colour": "#a425c6", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164921, "uuid": "ad90619d-7fb3-401f-ba06-ee6686bb96c8", "value": "T1B5C2286E07E605FCE91A82F5C8316417D370F44A2EB1668E4272D9D7EF426C2AD2C7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164921, "uuid": "b45f0a60-1552-4ebc-be24-78ffc7c23450", "value": "67b2e05b342c56b6c89451a62cc934be", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164921, "uuid": "a60c9b22-122e-40b2-9ea5-740b357855c6", "value": "768:JNIikyGe4EJYAAbFsukvZpk2AmzJKqYNd:X9GepEkAQ+n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770164921, "uuid": "ead74edb-62d6-476c-8cef-da8c3f71ecc8", "value": 28160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164921, "uuid": "be0e8e55-3416-4881-b19c-2aa9e586075c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef2e967b-0160-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770165126, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165126, "uuid": "4fb26c56-d158-4ff1-b5a4-486316e8ec2c", "comment": "Malware payload (Mirai)", "value": "33c7593ca17ae875ba92b57880d8b2f1", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165126, "uuid": "d11984fd-b04b-4c17-82b8-8b20ef093058", "comment": "Malware payload (Mirai)", "value": "5dc87ef613f5097165fd822694636c55fe52c867bed18136a8a29c85c5f955a5", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165126, "uuid": "da96f32d-3d62-4174-a2b8-a51d0f798de9", "value": "T12393F8CABC858B10D5D525BAFE0E618D33539B78E3F97103DE185B2E638AC6B0A375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165126, "uuid": "e0907769-00ac-4c58-8e41-280f9ff85f1e", "value": "1536:u2nx9w+IPNz15ssuzkfiD/EBJYfUXqBwsWht0wDrl63QOqQf2lfgiqIXTZ:Y+IFruz6iD/EBWfUXqBwhywDrl63QO4r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770165126, "uuid": "084445d0-4765-4af1-a66f-1e5989366d5b", "value": 89540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165126, "uuid": "274b34b6-38b1-4990-b13a-d9f8aa1877b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af940cac-0041-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770165141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165141, "uuid": "05aa6448-9102-4eb9-be55-2e5057548c08", "comment": "Malware payload", "value": "2662d42a40d46ecc977862858ff629c9", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165141, "uuid": "effa42c4-d860-4fb6-8261-50b9312f58d4", "comment": "Malware payload", "value": "2b2ddcdcfa49d53654a5feea0474c7f29a5ca6f0c5e6452a9216ace89f1a7b0d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165141, "uuid": "335d3d84-85e6-4c2f-b12e-784fa3de838e", "value": "T167310A191C9DA26FC9534D3132C68288C8412D7FD0EFF5039D4A2C26692013CA970A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165141, "uuid": "3e0c5dd5-a9a8-4700-86bc-aa3bb9987289", "value": "24:9BK2q2AfruEo/8uqsLuHsRw02tQhwalSrRdR8WQp56bFWFM/jjvT9kE4lct+6q:9ExHA8YuMmDtuk6WQf6bFdrjryE4aXq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770165141, "uuid": "c91cb522-fe08-4314-9ebd-670472955abb", "value": 1586, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165141, "uuid": "986d806b-82e0-4a18-8560-d07aaae80609", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "94674734-0130-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770165257, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165257, "uuid": "25dc7d73-e374-4753-9176-b5e02543a378", "comment": "Malware payload (Mirai)", "value": "226dcfe477b4019516b6ff3442881a88", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165257, "uuid": "ec3a8092-c381-4901-afb4-7c8707b9f1fb", "comment": "Malware payload (Mirai)", "value": "0cce20071a014da88feb55d7935d8525390f1bb31cc8259018f57ed1bb1292fd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165257, "uuid": "2cda075e-8319-4ee1-afeb-d47256d25de1", "value": "T17F9304756442F2BCEAB85074F40329E6265206093FDCD5E3AD87513BFF74788A22DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165257, "uuid": "43aeabad-baff-42a2-8804-51c60364ebcb", "value": "1536:zKE9xDDpGRXEZNInWNoXmmKYVBIVCCfy0K9q51ZJ2E:lpGRXA3aWmxuR5voE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770165257, "uuid": "d0d491a4-5e05-4439-9cd4-560ca9ba2725", "value": 91912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165257, "uuid": "e37eacf9-5082-4259-a7a5-79660f0301f9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea031301-e6e7-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770165357, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165357, "uuid": "66390eef-19ff-47cc-9b59-87687ea5867c", "comment": "Malware payload (Mirai)", "value": "f00652dc89beaae9e8aea560bfd24931", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165357, "uuid": "1130db34-d779-4fa5-b5c6-49b9c79a35da", "comment": "Malware payload (Mirai)", "value": "c032550cc344c3f14b7c564ea58a3c5159ed4e8edb4266f59bfc3e7e8a13ea9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165357, "uuid": "907e4673-d059-431b-b110-afaf8c644d14", "value": "T16C13E1A3223EE6B1C4751CBD141D4284F17A2E86E587277F86C9657E0C3E624B229F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165357, "uuid": "70d2ae7b-d720-4894-be6c-8fd424e8011d", "value": "768:uv6q4f/bZgfADLt6Wsd/JJgi5wUehqVhAPYO2xocizTGFsaYWyFSyg1Kn4RzsFBL:tfDfDLMWsfJ54GCceCFslWyFxISB/c8t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770165357, "uuid": "4fae2a92-428d-4210-9320-55db608c8387", "value": 42452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165357, "uuid": "cf6e17c0-6a40-46d5-ab00-bd32b58166ef", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4bfbcfa2-0129-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770165475, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165475, "uuid": "f8546864-63f1-4ef4-a314-21fd959471f3", "comment": "Malware payload", "value": "efb466c89129bbb03d07a78ded356e95", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165475, "uuid": "44cf2a5c-2e62-42d6-b69e-c228e8b29664", "comment": "Malware payload", "value": "576567c30a8df161eb79cf2a68d5f3a4f90267af337cbd3a5e06f2bb6b0a4400", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165475, "uuid": "aeb306b6-cf13-409c-b4ab-f4c1027e284f", "value": "T1D5310A94AA831003CFD6E1763CF18801CBF429C4694E1BBD0B55E91A7FD5B62AD132", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165475, "uuid": "71dd86a5-7b57-49d8-a9cd-2a75d0babc55", "value": "48:9y1rpPE1hhkItZy9Q22e3tTKwlyeHwbZNbzXLwYn:wbE1cIbUQYKwlyeQbZNbz8Yn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770165475, "uuid": "d7efd3e2-5781-40d6-b25d-f54b78046006", "value": 1584, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165475, "uuid": "0ddfe904-f50b-4395-8051-b77473aa32dd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c04c059-0133-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770165840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165840, "uuid": "eb4c35bf-5503-4013-bbd3-31b38acd771a", "comment": "Malware payload (Mirai)", "value": "78fd9e7dd34f0c64a7ca9d4c7b00b81b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165840, "uuid": "1c12ee92-1890-4165-9cd3-48467622f398", "comment": "Malware payload (Mirai)", "value": "37511f960894bb1bec92f792eb9a772a6a7926596155cbe3f60ca2b81a04e743", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165840, "uuid": "0c2d12fe-3e00-4b58-b3fc-135ed39952bf", "value": "T159531782FC81DA07CBD01336BA5E51CE33257399E1DE7207AD126F613ACA91F0DAB1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165840, "uuid": "0cd6126b-2718-452c-82cd-60badba578b6", "value": "768:R2vdBKuGlXfq3EkjjrMilYKhoB5Uz6uPel3Q+Eg1cmKF4cPpo77HabBNu56upsTa:wv347knYildOUE3Q+FcRXPkXpswm8FL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770165840, "uuid": "69b425eb-adb3-44e3-a1b4-98b2aaf5bdde", "value": 63656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165840, "uuid": "2035ce64-b26d-4997-8579-bc0efe9a84a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ea03cfa3-e6e7-11f0-a6da-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770165875, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165875, "uuid": "9af4ff1b-e576-47bd-8072-f4f94af954ab", "comment": "Malware payload (Mirai)", "value": "c9535029b96ffe637232caeda8b316ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165875, "uuid": "ce5aea41-7d33-4080-b597-ac504e75dea5", "comment": "Malware payload (Mirai)", "value": "d76564ccae6da46add86edce0bb04f496cd1314627037762b9af384f8b559d98", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165875, "uuid": "942cd086-e762-4adc-8151-fd40e63aa306", "value": "T1BEC3BE97F78B25A1CC6246F007C77B8E2E6361019E6BE9E76C1E667B09790DB19073", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165875, "uuid": "27e7abc5-8911-431d-8f29-b074517e017e", "value": "1536:7FnZYTO6EtVQgh3RXighMa/WqqnmQ2IQWUpBTJChxZJqcg8z0/LW4:7hZgutmonhM6tDIQWeTJCKcg8z0q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770165875, "uuid": "d6c10b21-0ae5-4300-a993-5eba79333884", "value": 124352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165875, "uuid": "3fad3791-3921-47dd-8962-44d5efe30078", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0131acc-0162-11f1-8b2a-82aee05be84a", "comment": "Malware payload (PureLogsStealer)", "timestamp": 1770165933, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165933, "uuid": "9ff10d49-ac3e-4e9f-a7d6-abecac80e97a", "comment": "Malware payload (PureLogsStealer)", "value": "83ceeb3114348090e069f49e980638aa", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165933, "uuid": "5826e8ea-eb06-4e7e-99e5-c2cf6f85cde3", "comment": "Malware payload (PureLogsStealer)", "value": "2f9c958bcfe1bfa7fa0f1a0cf563cc032a4da1c6571bfc5121559e0db84d8166", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165933, "uuid": "723682e8-679c-4af4-b82a-1cce9fe37a9c", "value": "T1E8461260772122697055B607276A21B79A00150F720F68FD6D78C7FBF87DAEE8E807", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165933, "uuid": "39365c53-f8e1-41f0-93f9-566e64f95fe0", "value": "96:2P0IK00IK8Jc4m1IKjRxZewZIMIR8tdozzCB80doE4fzwjDfvahRdcoLjwoMOPU+:W4lS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770165933, "uuid": "e5d3cc1f-803f-43f6-ab40-0f2d6cc9905b", "value": 5665176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165933, "uuid": "a1355482-1279-4a2e-8a47-82890533b758", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1438cb16-0163-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770166047, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166047, "uuid": "77ffded0-21ab-4481-a9d1-c4b1b9607b3a", "comment": "Malware payload", "value": "c364389aa3106e9d8ebc7648e773dc1d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166047, "uuid": "2992b284-0630-4868-a292-0f2360e7dbe4", "comment": "Malware payload", "value": "0f5431a1372e924f7e4f68e5a31e7b4a809b8d3424cff94ef5b075ef97e447e1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166047, "uuid": "894a53e9-b583-4fa3-9003-977069aa3cfc", "value": "T14EF31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166047, "uuid": "6375f936-cdc2-4580-b244-dc7fbc1b73f1", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas08:aru8GPLMWLasAlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770166047, "uuid": "c7689a40-8f6d-4cd2-b8e3-04fbe72b06b3", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166047, "uuid": "4e7ac9cc-cd7a-49c3-88a7-a40bcc1ec859", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4de91ea3-0163-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770166144, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166144, "uuid": "a7c84944-9912-4a04-a38d-e09930361976", "comment": "Malware payload (Mirai)", "value": "1096a5b78a73f0bd7bfe7d752c6a2799", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166144, "uuid": "f271d56e-60d0-4f5b-b735-9c56cd9b7532", "comment": "Malware payload (Mirai)", "value": "ca420d0cf1235b5cecc53eb095aa2dfcfcf5eb861b33c264d0cd1e0a3ff8c538", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166144, "uuid": "f675d7cc-c3a6-4b3e-b364-8d8c0fd9244d", "value": "T1236307DA7CC5C602C5F061B2BB1F61CE375643A8E3E6B157CD19AB29634F8970A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166144, "uuid": "078d4804-7a45-46d8-a450-9e6e4593ad36", "value": "768:qR8TFRwTVrK1xgs12toyWAIffZm4G1h/2RmpT5eOilg+6cy+WTUGAMdovfhDaxZV:FRreincJMiNie4P1gP4oACkT5f13x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770166144, "uuid": "11344b4d-12fe-4e31-96b5-a5a769d45a75", "value": 71064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166144, "uuid": "4de807db-2a8e-4194-bbd0-2a926ad1e8d6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f231c5e8-012f-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770166145, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166145, "uuid": "62a74cd8-094a-4dd1-881b-7f102b43565a", "comment": "Malware payload", "value": "31e8beda5e7194ceee6ce6166fcc9655", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166145, "uuid": "e98bc82f-a443-48e0-814e-aed7ae822256", "comment": "Malware payload", "value": "0a0fde8992600386b25531cc42889c01b93ee32d0e6c6a0a2001d82c61189c7c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166145, "uuid": "d1a7905d-a9b4-4915-b016-9c58358ffd5e", "value": "T179310C0D8756B2E4E6527F3075FF7641D325045A094BE4149E3654DF2B0B159CF4F4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166145, "uuid": "ebc9251a-786c-4bf9-a461-f06ad5b3bf95", "value": "48:9a8Q7MvIBv9ITc4x6ttxquoQhS20AiExKld+7Ec7:87MvIzIg4xSxqr/20lYYc7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770166145, "uuid": "4a7cff01-4a2e-4147-9c6f-d7afb07266a3", "value": 1581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166145, "uuid": "e505b694-381f-45ef-a822-556a7fc6550d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de054923-0163-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770166386, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166386, "uuid": "b35cb2e5-8ace-490e-ab3d-352937c990b6", "comment": "Malware payload (Gafgyt)", "value": "079688a05e660343a5a701c6342d4a7b", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166386, "uuid": "e7ce83e7-b1ed-4ec9-a00a-8f89cb8558bf", "comment": "Malware payload (Gafgyt)", "value": "4714a6681225bd25e3c9eee967bf9305f655f61fecc502270fbc177acd0ebc1c", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166386, "uuid": "5ed4f536-6005-4638-9ecb-6341a7cb3539", "value": "T1474190CB3360CAB8ACB4696F3229741071F9A0B69BBE9F441BD834D9848DD1C30C5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166386, "uuid": "f27d2a74-200a-48af-97e0-efeb312f976f", "value": "48:1e9a/seuXErhKAvqZA2YIOUo8oZ3v0biEvvSZXrvNAfE:1U4hKAwYIOUo8oRcI/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770166386, "uuid": "8c9add7b-a27c-4d3d-80ca-9639c3786726", "value": 2036, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166386, "uuid": "61461c4e-ef4f-4c9a-a047-319ac68ad62f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2039d0e6-0165-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770166926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166926, "uuid": "bdf1d584-e9b4-4a78-8a8b-46fab46ff919", "comment": "Malware payload", "value": "54b9463926fd4c0f8b25a4406ab977ab", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166926, "uuid": "2eec766b-5c04-4378-9f01-d540d0968965", "comment": "Malware payload", "value": "ecaa33aec25a96f15d89851ddb7524177404e4d21683608be2391950fde1a1b8", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "SantaStealer", "colour": "#d983d2", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166926, "uuid": "aafc1ba8-772f-467a-a36a-f82602cf975f", "value": "T1B1B1120682F888F2C00C03B80647C98462A4642497E093431FA0242FBC211AD88FAE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166926, "uuid": "843b41ed-c505-4e57-8ac9-a972fe69edbb", "value": "3:WlWUqt/vllnl+YZcFTS9gXeF+X32ZpAl4/l/i/FtldltllEPl5vxVlJ/llDtllFG:idqGVg3F+X32Q6lwR1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770166926, "uuid": "c92698e4-a085-48c3-aa7a-45ddcf923b87", "value": 5120, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166926, "uuid": "4abb88c0-9cd8-4693-8c0b-96912cf12584", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "448cd536-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770166977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166977, "uuid": "360f3d04-d598-4f2f-9b38-65f6caa8b15d", "comment": "Malware payload", "value": "a942530b3fc2213ad0de0731fe417f2e", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166977, "uuid": "9750cf5f-d422-4f7f-a2d6-47354dbb4627", "comment": "Malware payload", "value": "a6ffc5f875944f63ee69dcf49460d2b7392ce9214c3c5f7a3b34a80ed1ac6680", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166977, "uuid": "ae7be27d-aa20-44b3-8d6b-ccbb25450c29", "value": "0B73121613A925A152314AF1E7FE6F88F54D2A6C8FF1AC24BC217C68ED3336D1CD5518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166977, "uuid": "f58f9d84-2606-4f7e-a8c4-959e710e2dc0", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/Jl:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770166977, "uuid": "83ef1b03-6709-4759-9d11-4085257acdf4", "value": 76744, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a043df9f-0165-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1770167141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167141, "uuid": "260eca84-342d-40d9-bd89-636ed1b233e5", "comment": "Malware payload (Vidar)", "value": "547c8a9208f6dcd9b66e82430b796ce5", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167141, "uuid": "179aef93-df42-4edb-9058-5c2a7e98abd7", "comment": "Malware payload (Vidar)", "value": "2f16598315c12f7ca4625759396b9fbf38db623b4e2b7c00a6af24c3c9069fa5", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167141, "uuid": "6bc2b059-f656-426d-a521-078d2aa34cfc", "value": "T1158522513AC9C236C3AE193784AA9765766EBD750B30D0CF67917C6C9E317C2B9383", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167141, "uuid": "b2029630-4f22-4213-8004-a12d86287b45", "value": "49152:7pxxfKyitSpxpj/QnqouqLMDnpWa3PMmT:7pyyaSpXj/Cq7Tpv3PMC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167141, "uuid": "d88d7f29-9574-4faf-a825-d67d31e34808", "value": 1728512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167141, "uuid": "21129a3c-8a25-40c1-b01e-e1dede7022c1", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770167176, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167176, "uuid": "e770502b-2e41-4120-a228-7a6d457a9848", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167176, "uuid": "c510bcd5-56b2-4c1b-81a9-de617bd6d0a8", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167176, "uuid": "31b78b9c-daef-406c-8bfa-0fda2812dab1", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167176, "uuid": "b2a41cfe-8daa-46b0-b7f3-9ede46e10896", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167176, "uuid": "628de6b9-161f-46f0-818e-90a6ed6e9032", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eb90f9f4-0165-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770167268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167268, "uuid": "8f4332ec-027e-4fc1-95c6-1818ba64a5a6", "comment": "Malware payload", "value": "20da896de67f945e63a65b70dc9f2c81", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167268, "uuid": "415a9b5d-206f-4aef-8191-514159d0f3f9", "comment": "Malware payload", "value": "15552670430a30b2f36d29c70724ac2e59877c0bfcb4bda3dc45572ebabc810d", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167268, "uuid": "c7bc6508-ec9f-454a-aaf2-7c95a63bc7a8", "value": "T131E3F97F83F6313572038359F5A2A72896ADC233EB410ED2F9B29A9C8FC15A141771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167268, "uuid": "ea29a5e0-db2c-4adf-9114-67148f719a8d", "value": "768:1ZdapEbrTWlGRNjcXscJGcz74k/tHcTwAneJsfifRfiVIrePfHKIYW7uoFSnUh+x:dapAryl4k2w/JoIrU7QA4Y/hJgb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167268, "uuid": "7f63b947-1930-44a7-98ad-db0508b7a0e6", "value": 147860, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167268, "uuid": "6a7ca87a-6fa8-4db7-994e-d9086d8b6aea", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "390ae8bb-0166-11f1-8b2a-82aee05be84a", "comment": "Malware payload (AsyncRAT)", "timestamp": 1770167398, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167398, "uuid": "9c951d9f-7fb4-41f5-8397-f9c575b9f3e4", "comment": "Malware payload (AsyncRAT)", "value": "7a7312f1677bf2747cdd3be62d92fead", "object_relation": "md5", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167398, "uuid": "7edbaaba-e4d5-48e9-8703-0054a97847ce", "comment": "Malware payload (AsyncRAT)", "value": "c3c465c8670333252fe74404324a72ddf5f151b13c1fcb219beb4e88da4926b2", "object_relation": "sha256", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167398, "uuid": "df6d4d2b-0fc9-4b07-b57c-f6f1a3202bac", "value": "T1FCD623E9488562F4D4EB4A107087539F78C126AE45FC6C0A39D1BE521F42EFE254EF", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167398, "uuid": "7536cfe6-7e55-40d1-95d6-19f3b89b0bc3", "value": "3237d9e15219482b63b98258b9769406", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167398, "uuid": "947ab870-ad5f-459b-8949-f9dcb967b1c8", "value": "196608:EPqjE661jnlYk2ptDP0U2QXk3kxoYNb2AHf9cOV9ud4NqGuoU:I3nYkw5P0NC0kJqA/BjMqru", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167398, "uuid": "56d181c3-cda4-49f6-9e97-666336ab8e6b", "value": 12835840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167398, "uuid": "8d821653-bdd2-4b49-8feb-a91fdfe0e67c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dea96eb-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "2df3304a-87e8-4928-998c-45461ba46ca5", "comment": "Malware payload (Mirai)", "value": "f3cf07f5e9c000a3cd533bdbc5ed0411", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "4b1c2ca2-546c-4976-9406-74eb97d35839", "comment": "Malware payload (Mirai)", "value": "c09dc48fdf7f5ba306a282cd32efa868bf4a2db8ba01d67a4a3731771a42cc78", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "bce292ad-bb92-4b49-b1f6-b126fbbc5107", "value": "T17CC2E0F63E77399BDA25003D3899CE3386B5E052D76EA613A240524920071BDB7729", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "7c910d7a-058b-461b-9177-3a75a20b007a", "value": "768:HMwoDZLFbBy6HQHRYfeAxdd8gY0OVOD0Ng:HolcYfe6KXLO46", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167782, "uuid": "f6590150-046c-430d-a506-38e479b955ed", "value": 28056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "4e89a3c7-04f1-41fe-9918-c50a9214316e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1deabc7f-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "c759ef50-b066-47e6-a65d-a7c1c2380fbf", "comment": "Malware payload (Mirai)", "value": "30f86a767ed74d5308f7a3adfb7d0cef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "6d15d7d1-78b4-4d7a-ba49-aa2325a1d215", "comment": "Malware payload (Mirai)", "value": "77a13fd8229b94027197584f9adbd5e5f439472c2c00c63775a9e82ee3665b27", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "861509c0-721b-463f-b7ea-6ac2c9e42932", "value": "T1F833F262676E29E291B09377FC33EC1A969C1AE9896730DA3CF0561577C58024EF27", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "12949d03-ecc2-4dc1-a4c2-a4f0164cbbab", "value": "1536:j9O/ZMAXIxNUk05fLcPqF1aBexo4opKZbQ:j9O/ZNKytfLGqFUFp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167782, "uuid": "1918f708-da81-40db-a415-1b07eaa8e173", "value": 52520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "46de48ab-3987-4709-9f63-cc58959160f6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1df0d19e-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "70b3d0ca-dbab-4fcc-8b2c-d4c1bcdb7499", "comment": "Malware payload (Mirai)", "value": "7e44fdf24a96faa27fbff88b1d6353f8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "803e5367-0554-4950-bc86-39c829c4a632", "comment": "Malware payload (Mirai)", "value": "1176b46071a100d2e41af9c702dad6f3028c766e035808f54fb6b377e4011e39", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "8e58970c-8522-4992-9254-208d5701c6b3", "value": "T1CA735D24A97D2E26C0D4A17B61FB8321F2F6230E2570965D7C760F8FFF2464468162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "8ae61feb-9eb7-4958-a1b7-f60e18fb78d4", "value": "1536:5ms+geQfvznpCR8ee84cNsAUiAvFI7IlNnws86:YwfdNu4cmZvFqI3w76", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167782, "uuid": "7ca1b095-9625-4b96-9eec-ee657e34c8e7", "value": 74752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "8763143b-ca84-450f-86e6-882f6e474e61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1df0f810-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "b98b8710-2a89-45e1-a021-43a4ae595e04", "comment": "Malware payload (Mirai)", "value": "d767367ac046d34b4da916ac0f53c2ea", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "ab109a16-94d9-435c-ba71-de27bc3b7884", "comment": "Malware payload (Mirai)", "value": "fba5e44480027746d461101cab68502a951d67427e89a14c7d708ef2aa0e2866", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "1500a20f-5686-45e7-a966-1a26423f74dc", "value": "T1EBE2F1A3D3719052DE746AB2FA69C5CB6BBD4ABCD27B30B3060566182D5B0435F3C8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "3108e392-ce7a-41d5-9af7-078a93d93e17", "value": "768:PoiWiO031vpAPbrVWZK3XVGxm9Xjzxwj9q3UEL5I+:Porm1vpALgUJnLx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167782, "uuid": "8cdf4b69-e76f-49f7-933b-51b039643b8a", "value": 33028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "497bf8cb-97c9-4cd9-9ae2-2d8d9cc50f25", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1df71aca-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "ae3069fb-c519-43e9-83c4-248ccd8bdf82", "comment": "Malware payload (Mirai)", "value": "bb2d20a59137334f341f136e8e2ab654", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "c7c3db81-308c-464b-a997-8db528aeff5f", "comment": "Malware payload (Mirai)", "value": "6a42e7b89ebeccfa971ea18ff183e932ef6e8567bcb53984de9ea3badfae8f00", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "83d5c14b-c726-4aa8-8f10-844744860423", "value": "T163C2E13092B918B1C7600532F6B816CA7E530FBDFAEE3C90124196F63941D4629EEA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "c5456781-cded-49eb-a232-46f395d59237", "value": "384:Aot/koxisa34beDtZwuaCBsk+G9lLSsLYSTFs9u8OtqlrNEX0pYghymdGUop5h4:A8soTAZ3alkXLvFh8nNEX0pYgs3UozK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167782, "uuid": "8aba62ee-064e-4ee8-a3ef-10de69b2fe60", "value": 28176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "71478f73-146d-4af0-b14d-cff0b38fc1aa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dfd9ae2-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167782, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "b313e954-4623-4765-92af-869497a5f164", "comment": "Malware payload (Mirai)", "value": "4a4acf3ae9c8acd3a521e8b2dacfe56f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "b04c0234-a375-4cde-9227-b75612a1031b", "comment": "Malware payload (Mirai)", "value": "11a1cf3c9aaa677caa8e8ac708799a2d843881870f92cc5353e9286b42152a6e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "db70868d-5bd9-4629-b114-af2215128bf9", "value": "T1F5536EC6B4119E7DF5CBE7BE84224D0EB821722150531B27BB6FFD83BD721A48946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "0cf75881-798d-4c2e-b074-a86e96c4416b", "value": "1536:kPqRg0FGTbSX5xpLepSGorsF7QhOx2X/ZOqc/yA8p:p5VHV8I9cKT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167782, "uuid": "5d32f2fd-4607-4e1d-8a86-7c792d6c295a", "value": 66508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167782, "uuid": "ad8b3728-93d1-4796-9d35-21e4ed74dc50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ae84fdb-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167830, "uuid": "8736ee63-23c2-42d5-a86d-8d8cc9e49e03", "comment": "Malware payload (Mirai)", "value": "2fa46593aa41f23cf0c1d0194d15604b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167830, "uuid": "4e2aa799-13bc-4e4f-b161-07721c2cdfc7", "comment": "Malware payload (Mirai)", "value": "299565c76c93e224d6bd5cbcfc05ac42470f56e5c2ceebbaa07b28913c68d30a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167830, "uuid": "0e097e62-d2aa-4f7f-890d-955491ad15ee", "value": "T1CCD2E12CD99D7D05CA9D3EBA10DD96B5398CB4C0A35EB68E17268448B617E8BBC070", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167830, "uuid": "b906ea6a-b209-4ce4-bf94-6243d112a030", "value": "768:k1uUtLrVDsAp6tLkF4FuetwEub4sU/M9g36KNkUSjJbUWUD:kbDs06t4BEub4sU/MbUkXYD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167830, "uuid": "e2e14b02-ae24-4d68-b84e-7e1ce86716b7", "value": 30324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167830, "uuid": "226143e8-a795-4525-82ad-01228ceab989", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ae91094-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167830, "uuid": "49b864a6-bf0f-4f4d-a0fb-4da2f3e9fabe", "comment": "Malware payload (Mirai)", "value": "138fad266ba27c645200f00c209c5027", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167830, "uuid": "b47a49b8-0a65-4989-b757-e114c593775f", "comment": "Malware payload (Mirai)", "value": "d69ef6105f26b45ece9eacfcc99f647f6e43518cf80a59ffa60cd7e2701eae9a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167830, "uuid": "4c469243-cbcf-48d6-b637-6c2836a27f64", "value": "T187D2E0F7E2B7A6F8D4F2B8712866DC80F59630A78724435641BFBE85DBAB34C51309", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167830, "uuid": "0c51c383-05fd-41b9-83f5-87ed8d5de795", "value": "768:NYSoXdJZgicCHD+C98MP7L1YVPb2Xx8+Sx0sx:NYJdJZuCj+CiE7L1APbax8Btx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167830, "uuid": "57a21dcf-427a-482b-afbd-d2e0ad5dbfc3", "value": 29440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167830, "uuid": "ac5721bb-04bd-4471-a390-1fc6e129000b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3aee06aa-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167830, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167830, "uuid": "5ab360f7-dd20-4f1c-b5dc-d22bf945a0c8", "comment": "Malware payload (Mirai)", "value": "853ece7cf4408da5047b60a920ec1e17", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167830, "uuid": "33160e11-90c4-45dd-a6ef-ed612cad99a1", "comment": "Malware payload (Mirai)", "value": "088517b0d3320fd21a52b55f64f0a6b5e2b51f3b2968cca79a870aabd9f53950", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167830, "uuid": "b12bff7e-050e-48b6-acf0-213de82e4c34", "value": "T1F4539FA5C5ACAE58C71441B8B654CD398723F408A5A76EFBD646C796800BEFCF0187", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167830, "uuid": "1b8175ac-35a8-49d0-9195-38a764dc744b", "value": "1536:PaAtVnz1/mUUNztiYmW6ihiYLTofs3wfpWIDNEJ7JC7:P/tVz1eUUfwN0T0f+whWONEJ7J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167830, "uuid": "67a87629-2f6b-4c1b-9778-81cec361bdc4", "value": 63772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167830, "uuid": "d1063a0d-6917-411e-9f59-9341e942b163", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "400fb8de-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167839, "uuid": "ce627748-bc49-49ae-b5bb-7a2b061a9d93", "comment": "Malware payload (Mirai)", "value": "d0c697ffb7adbc3dfc589ced3ddc7c4d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167839, "uuid": "b29ae495-4733-485a-8e3b-cf9b61f6952b", "comment": "Malware payload (Mirai)", "value": "bf11aeacf1715eaceeb88b2500a2eb3b26a9f6750b34a706c5e046e852ea17d5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167839, "uuid": "8157c39e-1752-488d-ba16-fb728f34641a", "value": "T155D2D0B91F0747DADE9AC8B5C3E423A01A351E12A902FD4BB4D8D7435B674C4A147E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167839, "uuid": "73e66a1a-c2b8-42d9-a538-04c9f2efa9ed", "value": "768:yxMWBhAHuLegF1aF4NscfOl8liVG2bSgJgGlzDpbuR1Jq:yxdBGuLea19acfjliQ2GgVJuE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167839, "uuid": "2cbacc11-9e00-47a3-bda7-a1f1aa618a47", "value": 29412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167839, "uuid": "8dd7c65a-ce89-4243-b0f8-30dc56d37c0b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40148143-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167839, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167839, "uuid": "bad6d6b7-08fe-4d79-81d3-43ce3fe73d12", "comment": "Malware payload (Mirai)", "value": "41cbe004428843a6650b99dc9f77d009", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167839, "uuid": "ec6957fb-5e89-44a4-b5a6-13c440b527e5", "comment": "Malware payload (Mirai)", "value": "3603bc35c28a61b116c561504fcf4199268bab2cb36821f75a3f7ac4818902f3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167839, "uuid": "ad91d8bc-ceab-4442-b173-89af836fe858", "value": "T18AD2E18976D353FB8C8DCA7EB65E403A30DE78A5A6B2D323B301D5530726180E655E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167839, "uuid": "034097dc-3854-4717-865d-e832e37d759a", "value": "768:WlxKd2FLPxEnspd6IHE4RlY990JMtupmG:Ld2FTnplHEw0auiB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167839, "uuid": "b2a40903-0669-4815-96eb-77a0147a9dfd", "value": 29456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167839, "uuid": "9322be2e-ad3e-4432-a9ae-f1f693a721a3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "48a799e1-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770167853, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167853, "uuid": "d5b3f9dc-5797-487c-9cfa-411366f229be", "comment": "Malware payload", "value": "9439b3bd77b744a2c5d52904f7451b39", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167853, "uuid": "ec458de2-efb8-4422-ba1a-f70249d1ae20", "comment": "Malware payload", "value": "117ee7bfbf72121b25cdf07bc2a2ebe71c878011cc1f85d4490ff27cd2ea6bbe", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167853, "uuid": "4ea956cf-26c6-4df9-b426-437298e8b6f6", "value": "T1F4E3F97F83F6313572038359F5A2A728966DC273EB410ED2F9B29A9C8FC11A141772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167853, "uuid": "17443504-1356-415a-913a-6eff1649bb45", "value": "768:HZdapEbrcWlGRNjcXscJGcz74k/tHcTwAYKZsfifRf+VIrePfHKIYW7voFSnUh+H:fapArJl4k2w8ZUIrU71F4BshYT8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167853, "uuid": "cb004531-09a9-44d4-900a-be46eec08c63", "value": 147745, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167853, "uuid": "640479c6-f02c-4271-b6d2-b9d5e70325ae", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "631abc5c-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167898, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167898, "uuid": "c397683c-bde7-4b15-a6ca-305adbf0c172", "comment": "Malware payload (Mirai)", "value": "85105ad271903566c3537c4ac320dc72", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167898, "uuid": "d246c569-a9d7-4138-a856-b7ebcd6853a7", "comment": "Malware payload (Mirai)", "value": "16a017cfa73f0d84a3ced9789b8810c3e3e0aaa7ce42c315eaa7df09f964e88c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167898, "uuid": "6acb7175-defe-4ccd-94e1-4e5cb9612328", "value": "T1DBC2D040F0419A40DFFB2DF02D40CADAFBA56F5F6A658E8026A493C5AB5C2735701E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167898, "uuid": "755dfef9-d14b-419f-90f5-b8919a9fb6d1", "value": "768:vVdafO76jpmNJJKehmA7trpfIX9KeA7PPsH4uVcqgw09w:bam+AnKehPRa9a3K4u+qgw09w", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167898, "uuid": "9a8060fc-f44c-4626-8ad9-f0afdf507be6", "value": 27048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167898, "uuid": "9ce957bb-3fd9-41d8-af74-e87f5b18b139", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "85045bbb-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770167955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167955, "uuid": "ca5e5264-3b1f-4ab0-a193-fc73d608acb1", "comment": "Malware payload (Mirai)", "value": "0c8229cf97f1bf735cf94706008a2138", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167955, "uuid": "978f698c-6ae8-47fc-9d5e-1ab7fa56c36c", "comment": "Malware payload (Mirai)", "value": "0d3141bb9e074fd9c2d12cdbf0c0b9c1b0eb9c5e64f7ed0c7268cf81138aec32", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167955, "uuid": "1720287c-e617-4e24-8253-263a2ffe8f8e", "value": "T178B2D0A48B91A707C6B0B075E27C8F926A3716E4C5F63526262093BCDA4149732FCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167955, "uuid": "4d2c1a14-9ce4-48e4-bac5-adb61e6e7c5c", "value": "384:4GaKXlJIDFUS0Mggks3aIrokYVDoDDRRKj55N7LB9U+BP7CChymdGUop5hu7c:4GaKQFH0rs3zWoDDRsjt7LB9U+BjCCs5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770167955, "uuid": "240d3fcb-a836-4ddd-8248-5c1749e600d3", "value": 24536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167955, "uuid": "b117e675-7eb9-4e97-8dcb-af9b9d99ede6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "24899b06-015c-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770168407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770168407, "uuid": "93701ca8-cbdd-4759-be1f-1fd50ebb107a", "comment": "Malware payload (Mirai)", "value": "b5e4e5541acb161736db23c59c9ebc8f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770168407, "uuid": "b5124b9e-24c8-4647-baa6-f260caabdfde", "comment": "Malware payload (Mirai)", "value": "c0e25664dc758e549539967aca50a0d9e1d6d5c738f9a1aba6b9ab14b010eb64", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770168407, "uuid": "53b61a0f-d8aa-41a0-a16b-f257896b8022", "value": "T1D38302B0188A74A2B4015638D5F9D2C2ABDD97ADD2BFB02B8F143318EDD054737BE6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770168407, "uuid": "b4ebf7c9-8d4b-4564-8dd6-4924a91602e0", "value": "1536:2WpZ5x53RTisw3AJfFeMZNluE87ToaM6y2XIN6A9HNh0nJ0n3:ZtRTisCAJfgMlN87m65I3BN4O3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770168407, "uuid": "fa30088e-9c1f-4c84-9d84-2186e400c599", "value": 81756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770168407, "uuid": "af699369-cf58-4ff0-b5d4-81614c259030", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "153791af-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770175927, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175927, "uuid": "f84748b6-5931-4f71-9385-c390ef54c8e7", "comment": "Malware payload (Gafgyt)", "value": "0a23f498c3aa0979e69425cb0399cadc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175927, "uuid": "5c0c0bd0-bc86-459c-a031-6e03222854d9", "comment": "Malware payload (Gafgyt)", "value": "83e99b642fbec10a8d2856d8a1ce83bcf992ff76c1a1c182a811d07059880803", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175927, "uuid": "cff5a96f-8eb5-46f0-89b9-c5c5f59a7694", "value": "T16AC3F192EEC285B1F2830471019B57EBDB35DE051045C769E75CBE60BCB63FA861B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175927, "uuid": "83059117-2c32-43b9-a9a8-b4a2f5b6f146", "value": "3072:qa3z5a9yc6DtpGIj0gKY9k70Uok9l8eXhnwz:qqm10V1O70GHTy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175927, "uuid": "24996e63-0091-414b-92cd-91ac1395a1e2", "value": 127073, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175927, "uuid": "a755782b-2edd-4eae-a664-2ea93b84f43a", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "154d59b4-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770175928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175928, "uuid": "4229fd11-4767-4470-91ba-842299c7b305", "comment": "Malware payload", "value": "7c648790ee988b15608b49728de312c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175928, "uuid": "26cd0987-c521-4302-8940-3c48f1451b8b", "comment": "Malware payload", "value": "df5f59c3128a5b658ac7d3a395b3d3d2ed63b8d9e1ac1b2c756c96011bbec283", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175928, "uuid": "35cfe764-0f2d-45ee-aa77-13b77a6315d8", "value": "T1CE04F046FE914FEFC81FDE74491F0627065D85DA13F0A32A85BCCC89B5A864A8AD3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175928, "uuid": "562e2a45-34e4-47f8-8957-d0f2beabf5e6", "value": "3072:oDTIzc663gmpzIFj3vV6/AmUTRG0/f3xlb8NPkf89NW1wMryiQTvVrKFoa5svfMe:rzR63rp0C/bcf3xl2y1wMrrQwNsXX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175928, "uuid": "8e84248f-ad49-417c-b314-350319424510", "value": 180237, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175928, "uuid": "8cf45890-8b17-4403-916b-bcea2dbb0518", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17bceb14-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770175932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "03f5351d-5703-4847-86c7-a2a46dcb22c5", "comment": "Malware payload (Gafgyt)", "value": "c9d4ded3f53a540bf2605b11c13b7778", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "79cb4d80-da95-4714-ab90-ecdce2bff2c7", "comment": "Malware payload (Gafgyt)", "value": "75a86d7cce2a9836fff39b675798b8ceb8e607f1eb98657ba1004857387cab45", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "4e1e7e2e-8e17-443d-bbed-eae141647816", "value": "T19EC302C2FDE291F1D5E382B3449B675A5336DB454008CAA6E32C2F15A8F1B37B55B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "106ad32a-28d3-4b5d-864c-4768d70507bc", "value": "3072:rOlNTZa+Ef6j3GzTbc+qzMk4sGnR7HAgGD+yS4W+E:aPGfc3Ed/g5E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175932, "uuid": "3a4f8b69-d99e-41f1-ab05-37e004844b78", "value": 126957, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "1e8d815d-f81a-4213-bcab-6ef071174f2e", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17bebd14-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770175932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "3616dd9b-5d47-4842-bfcb-c2d1cbe51f8f", "comment": "Malware payload (Gafgyt)", "value": "9e0d940fe5016d6bed2b8a4cbf2704d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "c64a9d25-6f93-424e-aa0a-c2e85b3755dd", "comment": "Malware payload (Gafgyt)", "value": "f1737980412a77ed477d8b1a44cb49c4da7a2aa6987a80a1883b74d217891082", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "9f14903f-ca5a-414c-9d10-268203138dae", "value": "T11AC3F106D9C1D1B4F583523310875B4FB77AAEAE0414EB5AE34C3BB8ADB47854A4B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "a7cc1516-d0fd-47e3-a947-8102dad6f036", "value": "3072:qa3z5a9yc6D6X9SaJPfyP7KHVkrxZ3TrKrfJqa+dk+9n:qqm10w9rNarxZ3T0Jedkkn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175932, "uuid": "a79bdc8d-e820-4336-9277-2101b89719ff", "value": 127073, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "77c87519-ac2c-4f80-a956-9a06a38a2b10", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17c2623f-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770175932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "460033b0-c8ea-48a1-a4cf-634c8dffd887", "comment": "Malware payload", "value": "299b32b645eae7e29a553ce938826378", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "88544b91-55dc-4574-b2f5-5d42613f8509", "comment": "Malware payload", "value": "f4d0b26085da09e8804d0ad119982f763673f941f9ce8c5454922ade3849a46d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "59dd3cef-664f-4a31-9bce-89e15803ea97", "value": "T14D04E182BB400F71CA62D17140F3D702EBFA27D616D29747A73CD9146B99788781FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "9c431ab6-2717-4804-9da9-8b0c0f210306", "value": "3072:kgfKVeEOH4lcgjBNDhzBVh+Rc3T1CnKpkXyLzk+2FufHf6XflRAn5upATh9MBgL1:kbNR1FzBVhEOvkkzkY3upAThmB4ci", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175932, "uuid": "419276ea-eff2-458f-8eaa-12a458c084a7", "value": 180676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "8bc8d26e-feca-4ac4-8cb9-85532197b52c", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17c2c1a1-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770175932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "bd9cb25c-31df-4735-b739-f0e9f4b43b1b", "comment": "Malware payload (Mirai)", "value": "e9f0596877e61f37120a78255416b8bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "fd976077-adb5-4ba5-b624-7df13f8f54a8", "comment": "Malware payload (Mirai)", "value": "055aac3cb87b8a8f248df0ecbd298902745a2372ff94226c3570680514a6ea43", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "0bc973ea-2c25-42fe-8189-65c0393ff7c6", "value": "T1DDD3E069F0C0DB73C6C616BEF29E16847323076CD2EEB3458D148E31779B5660E2AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "8c762c21-ae45-41dd-8903-a5dce20c842a", "value": "3072:7D0ownSrawCY822S/1oMZJAeyJlItJtmVYPEc61Eaxe:7xwSuwjLoqUJMJtmVYPcTQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175932, "uuid": "f903eb6a-2335-4b36-8a39-30a2e6d65f7f", "value": 142049, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "6b6bfce4-99c2-4703-bde6-7c80f65499fe", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17c71823-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770175932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "20b844c3-4924-497b-aeaf-99bb6d16c45b", "comment": "Malware payload (Mirai)", "value": "6f7170095c0dfb3466a7a1c7491ab8f6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "9ee320b9-ad01-4f4b-94be-413adec0806d", "comment": "Malware payload (Mirai)", "value": "c8c5416250d1679d209a3b17101e0dcb0c9a25dff0340af3e1326b60a35f4e81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "698d3520-e14c-43b2-b6c0-b7f148593414", "value": "T187040250FF0C5023E4979EB9267F1BB5A7A409A61CBBD22C2B04B7A216F32374547B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "d109b5d2-5a81-4705-bfc3-9d78f8cad247", "value": "3072:ozdurayQy5HEcMf3oNtpp00TP4+BWR8BXGsGv4b7SM3Vee2n+HUx0Wvu:ozdurafekcMw1p00TGRMGsSI7SM3Vk+Z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175932, "uuid": "877e76aa-7e3a-48d6-b680-75dcab0b6fca", "value": 186166, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "9267e16a-1237-4b03-a380-62df5ef7b7d2", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17c819bc-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770175932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "7720d264-9bd2-4fba-aba7-9eefcae91fda", "comment": "Malware payload (Mirai)", "value": "654435e06214abafef626530d6e124b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "fdc55957-c58a-48d0-acbe-f48fa1165d55", "comment": "Malware payload (Mirai)", "value": "63833bea01a4c6ed403b246a80c39104b0fb89fbe831e33226e31af08c3e250e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "363caebd-add6-46aa-8ace-3390db3dfb42", "value": "T191D3F198F980CF32D2D5197EF74E1289331303BDE2E973068D149A3077AAA574E3A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "7ad318f6-bd98-410c-93d6-df9c78d27e5b", "value": "3072:rponhnSMawdzSV4LOR3QLZ6gnfGBGnapNiAeyuhG9CiYE:rUhSjwdzSVRSLU6eYnsPeyu+C/E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175932, "uuid": "a23fb88c-6ec4-4fe4-9e89-db592af1f005", "value": 141438, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "2a7e4c18-b25a-493b-a003-ae8a7cf93eaa", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17cbdd58-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770175932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "b1fad609-7411-4d36-82c4-203e47d4c140", "comment": "Malware payload (Mirai)", "value": "61ea012f7a4c5cbe69ab0be191fa53f9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "fb581ea0-5e4c-4c19-b3ae-1104bd8d91ec", "comment": "Malware payload (Mirai)", "value": "9a544bc1f8a0cf6e796a963f8f13edded6f77470b26958f3347799065b8e27d1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "1e789acc-3931-46e9-aff4-01c5152a98b5", "value": "T157B3F1537690916ED2CEC2B60B67DF3B72B07446132467A6B315FA712E27E70222D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "fb37a0ed-bfec-4638-915a-2dc1d8a03340", "value": "3072:Nov4QV8UWY4GPjWB5BopRm1zQ/YSNabYtVfEKS0K:Nov3OUdi5BRaYScbks30K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175932, "uuid": "3e9fa90a-4f2a-4129-9545-f81a927e8edd", "value": 115521, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "6aaf97ab-7af6-4198-a4a8-b950c2fc1182", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17cdd1e6-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770175932, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "2284e2c1-2bb5-41e0-b3fc-da4fb41d7870", "comment": "Malware payload (Mirai)", "value": "18247098b19e60d8dad67662ba49cd27", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "ef1be0a3-3732-4654-be9c-64a6ae27e702", "comment": "Malware payload (Mirai)", "value": "c3ea0f9377f4a0e987491449ab83820c316cdd268f64af8bbde4f8dd6ec8317d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "2ac349e5-cc26-4ac8-8a45-1b46e3fc43a5", "value": "T175D3E078F4D0DF72DAD12A3AF65D1119331307B8D2EA33169F245E2837A729B4E26E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "bc01355d-6a79-453e-a9f0-ec7d422e537a", "value": "3072:foTTImvmBw6D+Vqtax+oYhbXXF0uUFnTi6bzcCHhPL5kS:fgIwWwRxXyXajhWqNBPFx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770175932, "uuid": "15168603-3310-4e26-9dcb-337418b3f1f5", "value": 142184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175932, "uuid": "63dd9172-5cf3-4e44-9f28-9770abd62fd0", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770179120, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770179120, "uuid": "a926aa9c-3bec-4ded-8019-40c650b32626", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770179120, "uuid": "92ece79f-c3a7-4d33-a428-77cd5c6f5655", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770179120, "uuid": "77908873-37ed-467c-a411-22c9589a7032", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770179120, "uuid": "5e03f177-8433-4d6d-9b61-34b3fe5f6e71", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770179120, "uuid": "c60b73d8-a8a2-4e23-8c90-fb1ab7991796", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a30350b-00f7-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770179200, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770179200, "uuid": "efd84077-c416-4894-aae2-242f3a09c570", "comment": "Malware payload", "value": "952d8dd6609e986d8888ce2cb35dce77", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770179200, "uuid": "fbf1fa51-5e2a-4c35-a9d3-54e29548615b", "comment": "Malware payload", "value": "43fc2356086cd7da53c2c39a2e8b6fa0800229c071cc205b2b265a7960e14d4f", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770179200, "uuid": "be47213e-b93b-40ab-9df4-646e72311072", "value": "T15431EA2CFF8B2305C7820CB55BF65E41D4D79283426EB12B0A63060AD502E52C6787", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770179200, "uuid": "e39e5cd6-99df-4d00-9afa-51c189b11b66", "value": "24:9v4e2qHaqpQiMs7UPFphzEPwUWZsUWeF3BhzdbWs3dy/AKc54i8wIM4N/:9HaZzUWZDRxB2WdsAKFFL/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770179200, "uuid": "10c8be9d-8d23-413f-91df-2e61097d1e06", "value": 1581, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770179200, "uuid": "62365e43-af25-48ad-b9d1-3b6d30267177", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1770181038, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770181038, "uuid": "3cca49ad-f1db-4c63-8408-c8b52b7f046e", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770181038, "uuid": "f8f185f8-9285-48aa-9385-5b9943ab7737", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770181038, "uuid": "5b976c2f-488f-4a4a-87bc-b3a5bb8e1f5a", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770181038, "uuid": "5a1ee9e9-d076-46d0-a641-7b86c02532eb", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770181038, "uuid": "a6ad93c7-c904-4b12-8fd6-8827d6d3ec22", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "407a4485-fd3a-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770182478, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770182478, "uuid": "60ab8e9f-fd22-49e2-bdac-eca134b8cca0", "comment": "Malware payload", "value": "ed88764dc0aa56ee150f6e459631f3b6", "object_relation": "md5", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770182478, "uuid": "e7cec321-6519-42cb-baf5-3d4e9a60bdec", "comment": "Malware payload", "value": "78eb9ba2bb40cc0d423717503e14a9e144b3c32ccf3db89257fb4c4dc67e12aa", "object_relation": "sha256", "Tag": [ { "name": "base64-loader", "colour": "#cb7641", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770182478, "uuid": "e8fcab86-6b21-4a65-ae82-648a908f21a1", "value": "T158427D1D4DB3C928B8BA456333DF4057F8239A92DC195F63376C7D6C8CA6527A60E2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770182478, "uuid": "9117fcc6-aa25-4c4b-a27a-9c5fde24db4d", "value": "192:X0dUS3Z4j7XDrQ1exZGF9U85Rnk1Lwh85GcRT54E3K4AlfjVE9X/LZ48miqfwVkU:6o7XDrQ1eLuR8Eh7U9t6jj6PLZ4jiEGd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770182478, "uuid": "e6693b1e-57bc-4074-b21c-86080c6afa18", "value": 12194, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770182478, "uuid": "f6aa9fc9-bd0f-47b0-8a73-d56482f07d04", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b04e8fa-018a-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770182970, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770182970, "uuid": "1be32d24-4542-4efc-9f74-b176d8786008", "comment": "Malware payload", "value": "8f2a137e4829f33bfb59ab267e6755bf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770182970, "uuid": "47aedb5f-22f0-4da2-a8de-0ec935805940", "comment": "Malware payload", "value": "5655095e0fbcb8f14a0a086f66dd9dceb92e126ee096eeb96c8718bf98481769", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770182970, "uuid": "adf91377-ab78-46e4-9d66-1db3f224e94e", "value": "T15493F70AAFB11EFBE4AFCD3305A5174939AD691A21B52F3A3674DC1CF50A64B06D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770182970, "uuid": "c3b06bb4-41d3-4079-b82d-97a1dcb0de6e", "value": "1536:m5tcDVpHiufgBL5/dSoXLPji3hY0cKqeYCSIbS481dxuuW/btq9fZfqFX39wu7rV:mncJ0LPsE9wYYiiibAmk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770182970, "uuid": "bccbe0dc-e0e7-4b4f-b567-d78385c1d3fd", "value": 89768, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770182970, "uuid": "bb3c41a2-2f9b-455a-a579-759fc2f112ac", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ca81b26-018b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770183241, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770183241, "uuid": "f3656ca0-7e81-4cec-8e9d-9497e6f969de", "comment": "Malware payload (Mirai)", "value": "3bbff7fddcb27394c06878fbbedbe5a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770183241, "uuid": "6bcc30cb-d049-4d5c-9e99-138a3eaf66fd", "comment": "Malware payload (Mirai)", "value": "21250f8b2f5bc4b1622624c26091f1a89e4f921750f65f7b4fcf4c5d0959ac31", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770183241, "uuid": "9fea2bae-5e7b-460f-bc0b-ae1662b59482", "value": "T1F5C34B46EB418B03C4D52776BA9F42493323EB54E3DB330699185FB43F86BAE0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770183241, "uuid": "58befb95-b3fb-4e21-abf3-03991a2d3e63", "value": "3072:pZbrJ6ah3P0srIGjE5L6wnezWVIOxVDlJj:pZbMah3frIGjE5+wkWVIOxVD7j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770183241, "uuid": "13a012a2-bce0-4e7d-adee-8cd9e14e3e44", "value": 128282, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770183241, "uuid": "a7437542-aace-418f-bb25-8e3dceb1e2bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6ae0dc28-018c-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770183802, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770183802, "uuid": "1e9caac6-92a5-4854-baba-1b14bdeefae0", "comment": "Malware payload (Mirai)", "value": "67ccaf9addca43fba6d976ed24a00f9d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770183802, "uuid": "5a7e3176-0c4b-4bb5-9563-fcfb0d045717", "comment": "Malware payload (Mirai)", "value": "d45bf8debdc0d316ac715d6982bf2833cb7123c11ef43967fc9e39a32ccfe037", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770183802, "uuid": "e6e29219-f044-4a0d-8e08-9073f6ef9a6c", "value": "T1D763734D7E618FBCFBAD863447B78B20A24933A527E1C584E15DEA011E7034E745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770183802, "uuid": "c254e35f-9a2d-4907-ac8f-0eb2f665f677", "value": "1536:kMggj2Quytgwld5+gZNoEXrlXruEXrt1cQ5Hei5w9zJmHNNoDRnjyo:3pj2Quytgwz5xAhiwRJmHXoDRjh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770183802, "uuid": "8ae293b3-d5d5-4bda-a28f-c05c3a9b0234", "value": 71668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770183802, "uuid": "aa86ede1-b618-4db5-b958-8ce2de422568", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3c2bd89-018d-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770184434, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770184434, "uuid": "00d9956a-27a5-4118-b5a2-714347344f39", "comment": "Malware payload (Mirai)", "value": "325abee80bead2ddcb27b4712e156bfe", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770184434, "uuid": "06ae4fa0-e660-476e-98d4-936410eff0a9", "comment": "Malware payload (Mirai)", "value": "1d410cfe96b84f1b52da3d8c4627e022226cd1aa34d37a50d56ce8e7cd4aa592", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770184434, "uuid": "b2876c97-eb5f-4b39-9861-e1494c9d6509", "value": "T1BAB33A01FD504727C2D327BAF79E478D7B351694A7D733116A38AEF42BC5B882E2A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770184434, "uuid": "667d8092-b45e-484c-aa2c-14ddf0b57fa7", "value": "3072:dB4m9EgNZrMk/y+Kvy5PfDqD1omPqqQRNAEetmO:h9EgNe+y+KvdomPqqQRNAEetmO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770184434, "uuid": "fec6ee42-abb2-4ccb-b7f7-d1af35507c44", "value": 116583, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770184434, "uuid": "3bf15eea-5619-4384-a3b0-c33f3a3e06c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cefb8d7c-018f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770185258, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185258, "uuid": "c3c0b9a2-cda6-4f53-bc73-42ce63406007", "comment": "Malware payload (Mirai)", "value": "8a0082d6ea25bdd658d70fc9738beb3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185258, "uuid": "edc47c1d-3a15-4080-bdfc-4a43fc7e3bba", "comment": "Malware payload (Mirai)", "value": "eb2baef135fd73539465c072f8e19b28587beea3a7e07b5f12f1b5fca2229074", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185258, "uuid": "23d6ca4f-5050-4fa1-9690-65fb238ecaf0", "value": "T1CF33F8C4FA8B85F5D907493040A7F23FCA32D97D4071DA9DEF8A9F35DA3794292122", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185258, "uuid": "3b3a57f8-f272-4918-bb50-509fcd3708ee", "value": "1536:Rh24UVHA1JqOMnjoMGhlV9QvSaR0VMs4+a:Rh2VHA1JqOYchTyvVR0VMs4X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770185258, "uuid": "6457813c-c53e-4b20-8d47-3015fbba27f3", "value": 54064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185258, "uuid": "9cf8765e-ebd0-45c4-8812-4c0b54e93483", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfe51ccc-018f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770185260, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185260, "uuid": "35ed48d0-3bb6-4c0f-9987-de980bce8beb", "comment": "Malware payload (Gafgyt)", "value": "dec3f65d2fb0a7f06357cee56600c4c3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185260, "uuid": "a8ed9c1f-e58a-46d4-bcfa-fb4d3caef517", "comment": "Malware payload (Gafgyt)", "value": "8b279ece21d38c7ced805d3d96d4a67b884216ab3b8c6ea7ecdca79d17d3e643", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185260, "uuid": "3311f528-8500-4374-97f7-549420bf4132", "value": "T19AA32A0399A18FB7C186ADB525FA59300B17B8911B1F2B867139A7F8570F4CEB40FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185260, "uuid": "855934d3-f5d7-4c3e-97a1-cd5d49051930", "value": "1536:oGQttwtioUM7aJc7itzKijco2wZUJCqzboRTsxOG+Cmc4GVT43qbuP+i:o5DZ2iOwZUJwTsxOG5mVGVT46buP+i", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770185260, "uuid": "234e1bda-f415-4057-b227-0f73d4d2f5f7", "value": 104158, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185260, "uuid": "d62ecb17-8ce9-4917-9af9-497905596baf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6342902-018f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770185297, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185297, "uuid": "e0bc6728-4224-4d2a-9a9b-ade3ad53a387", "comment": "Malware payload (Mirai)", "value": "945ccc998c7e9da021cd97acd75493d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185297, "uuid": "2a7a3664-4687-4388-a614-c79f8074c721", "comment": "Malware payload (Mirai)", "value": "8942eaaac37811aed637c9f8b194cc3764e5d37c34b94e00ba7b9352bb631cb5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185297, "uuid": "daa2ace4-a55c-40a4-8691-ec34a5255c81", "value": "T12BE3B51ABB618EB7DC1FDE7309AA4512108DA19612D97F6FB2B0C66CE74B84F08D3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185297, "uuid": "baba6130-ccb1-4855-b658-bd637fc0e5ee", "value": "1536:agP7eTsFRlkHTmGiEMXZZMavPdZIj+1MQFRBLV6zZFqikmkfmWFiB6qNCZO:agPV9EgRu+WuRCJkmk+WFiBdNCZO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770185297, "uuid": "bca0efa4-c31a-4742-a4f8-210fe7fecde7", "value": 143374, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185297, "uuid": "23030e17-f835-4618-9122-d8c2ca007169", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e71cdfa7-018f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770185299, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185299, "uuid": "c7e8445f-92ac-449f-82b5-876bd3a47a33", "comment": "Malware payload (Mirai)", "value": "11ea29b70c5cff0fa3df62e735a0f969", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185299, "uuid": "c265a505-65be-44a8-8a64-27640776a9d7", "comment": "Malware payload (Mirai)", "value": "ba3b42731495739734f66f4bfa4effa7669ae62e3c49b797738ddba6457f5c6b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185299, "uuid": "83653104-03ff-489f-852a-3165bb159eb4", "value": "T12B332807B58185FDC4A9C17443B7B13AD462397E123DB2AA6BC4FE1B2D46E601F298", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185299, "uuid": "6b4d4fc4-0505-460f-b4bb-b7bbe92f76db", "value": "768:ENUYvkxwSf0+fVlACmQwoM+JTXilBV3P78TLpAgyUTq0LvifHOgr:iFMqwfVlDmQTM+JDiB9IGg/Tq0sHOg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770185299, "uuid": "964b7ec2-8086-4dc6-80b1-df6c51c31bfc", "value": 54528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185299, "uuid": "5b828595-f79b-473a-9745-18efe4d73c5b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b18f090-0190-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770185467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185467, "uuid": "272f02e1-a2c0-400d-b5c5-8b17506ade02", "comment": "Malware payload (Mirai)", "value": "e5c2e19170363f04bde56da217798c9b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185467, "uuid": "21aa6c8e-231a-452f-84e0-788bbf49d94f", "comment": "Malware payload (Mirai)", "value": "72357f3bf1627b2b45df7e337454af60aa6f87a4e28544308b598df4d0fa4fdd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185467, "uuid": "f7b21d3e-54d5-4ad4-abb8-7895ae67e77c", "value": "T114C32905F9504727C2D327BAF79E479C3B351694A7D733116A38BEB42BC57882E3A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185467, "uuid": "72da93c3-6a05-45eb-9a5f-d175187e3dcf", "value": "3072:jBBmVjxJq4FWBaY6vWsQ7unyrEmo1rQPblbepuO:qVjxJmaY6vBbmo1rQPblbepuO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770185467, "uuid": "de0a79de-7cde-4525-96ab-5385a9ebb62c", "value": 121721, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185467, "uuid": "f093d18c-16c1-4569-a566-8bdfe57fe7fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b569ad6f-0190-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770185645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185645, "uuid": "2731b265-71bf-4cc3-ad90-f13d30e47ee3", "comment": "Malware payload", "value": "ba7a0dad04ca5ad3e649acd028b884ea", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185645, "uuid": "78ffb9b9-70d2-4e09-aa5f-918368124f6e", "comment": "Malware payload", "value": "a5c73803eec9c3d2c1b1c5424eecaea5ecf631d94e97aa4dabdd1e6b1ddfa31d", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185645, "uuid": "655d26f8-36d8-4b64-8476-f82f2ad568b9", "value": "T17031DA940B63BA3AC3148D7693FFAAC0C47C608420156215AA4D6F9A660167A9BFC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185645, "uuid": "0c33c436-d7b9-460a-b2fd-0a5ee92d402c", "value": "48:9IyEnI3UumCX1Yb2r8n8Ao9m+rYmmVplgZQ:CyEnI31rtlLUAYmmVL7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770185645, "uuid": "79ad33b4-b95d-4a31-969b-7894db194e12", "value": 1567, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185645, "uuid": "135f2b91-fccc-4b59-bc7e-34de16928371", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c5242aa-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770185845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185845, "uuid": "a2e7ebc3-b7fe-498c-b878-6d5f4467c225", "comment": "Malware payload", "value": "70e3f6b8302027cfd1a757e02252400a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185845, "uuid": "9edd4c6d-2b08-4b4e-8701-6f1a8a34842f", "comment": "Malware payload", "value": "edd1e9268ff4961c7d0d2364d7215925d38852fa8646636d8edb3e97900e53ac", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185845, "uuid": "0859bb3f-9783-43ad-b2ca-67d523dda05c", "value": "4C731229139924A5D63141F1E3FE1B88BE591FA9CEE1EC14BC117C98ED333AD2CD6518", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185845, "uuid": "27a74f72-910d-4801-8b0d-6d8bf5f34ddb", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1d:yYI0ARqw1qAEv7UIFM8oJorFquyjkRkr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770185845, "uuid": "c482746d-2329-442a-94ac-b2056a3896cf", "value": 79640, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e614ab0-0191-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770185955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185955, "uuid": "06467db0-dd62-4464-bff3-c03c17206a56", "comment": "Malware payload (Mirai)", "value": "026bdf06f1bd182e04f812980b4df095", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185955, "uuid": "786fb23f-be42-4217-9f19-3012c584362b", "comment": "Malware payload (Mirai)", "value": "b10272ad6b129e7409a245a60e596b45194c848fb0985461bad94a65d3db4651", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185955, "uuid": "825c2314-f5c2-4a6a-a5bc-2f06a59368f1", "value": "T130934CD2B740CAB3C1430AB116EBAF110532F5BB1A5A9E16F3687DF49F150897226F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185955, "uuid": "063dc941-12e1-449d-ad22-1d3ed4824110", "value": "1536:AD3YEU5eT9QRjlQhyUsU0z1eOYcLyhmX4wBgRdSQUuqwN6m1agvmgNLP2mJImVzQ:ADpU+9QRjlQhyUsUD2yhw4wB+dS8qrgy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770185955, "uuid": "138d68dd-0483-4e9a-aefe-c0e0982fac73", "value": 95834, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770185955, "uuid": "5ac013aa-8cf4-4dfd-9b58-216a0b07c9a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b35cba1-0192-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770186326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770186326, "uuid": "bcfb3c42-081e-4a60-a51e-5657c9c9d883", "comment": "Malware payload (Mirai)", "value": "251d8533f3c0e0797165f927e31afde8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770186326, "uuid": "0452b138-672f-4976-be05-e84b2f8f139e", "comment": "Malware payload (Mirai)", "value": "f429f2987bad04075b042146bcdae14ab002c637be93b31fe39b0964217e2332", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186326, "uuid": "1b671533-03d9-45bd-a9fc-3734616d7034", "value": "T1FCC32A377B270F23C0CA107111E31732AAB5D79934B95397B9E16EAC6F1AAC43512B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186326, "uuid": "0f5e6f43-df65-487b-af85-62dbe62124f6", "value": "3072:b3+PSYcfSo8Yo7Cgkj2rgsMCmO7FTF39ux4O:NpKXYhCmO7FTF39ux4O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770186326, "uuid": "fbe8801c-3a37-4eee-b3a0-da72928aa59e", "value": 122309, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186326, "uuid": "de66b57f-acb7-4f0c-ae0e-3ef25f61c414", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5c801b0-0192-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770186558, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770186558, "uuid": "bbb67731-ffec-4760-a6ef-725b5c943c24", "comment": "Malware payload (Gafgyt)", "value": "14c2689b10dc591449b08e2ded81f96b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770186558, "uuid": "41f6d787-f8c7-46c4-ac8f-e8eb782b23c4", "comment": "Malware payload (Gafgyt)", "value": "66388b5108fef8ce48a788723ccdc59b69112c0a9c0ab5f19c3f44cb75175176", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186558, "uuid": "894b05f7-c66a-461f-b6a4-e093f6500e40", "value": "T1DAB30952F801DFB6F00BE67204D34B22B630BBE24B532966725739A6AE771D43827F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186558, "uuid": "2c74a9e0-e447-46ca-b87b-79679ad24754", "value": "3072:x4QUxOhigBm61Vrwa5yL/LDiymO7VTJ39uPTO:x4rOhig06PyLzDdmO7VTJ39uPTO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770186558, "uuid": "e49097ea-666c-43da-bbb5-cec1c5c9e6d8", "value": 112843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186558, "uuid": "56ffa487-36b1-416f-b083-7013745fb440", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcf7f13d-0192-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770186570, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770186570, "uuid": "e029b5bb-3460-427b-8714-de30df2da03f", "comment": "Malware payload (Mirai)", "value": "418b196ec33976bf6ce4537600165a0a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770186570, "uuid": "c9dc0ae1-031f-4718-998c-c82ee87cc238", "comment": "Malware payload (Mirai)", "value": "74ec8cbb2ad22501a88736f31c31ee1749782d25303c89d758b93dfca45903ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186570, "uuid": "88c3fa90-e984-4269-8064-b4a5d4efa374", "value": "T156234BC4A583DEF9FC1506302176EF729BF6F53E2018EA43C799A9329D92603E5432", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186570, "uuid": "1b2902e0-e443-4ccc-8c64-958f38693b50", "value": "1536:ObOQ9NUKF5J+gWHFxr6j0u3F2F6u1Jag:XQ9NUKFj+nlx2QuVBu3z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770186570, "uuid": "8f4d5ab8-c32d-4365-a27a-fc4110183c4b", "value": 49968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186570, "uuid": "c20059d9-7d58-4ecb-8896-646313bd7408", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b0bfbd54-0193-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770186926, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770186926, "uuid": "c82f7453-28df-4078-b153-3656dd70e620", "comment": "Malware payload (Mirai)", "value": "167bc2e0ba830b08065c305913a2c978", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770186926, "uuid": "e62fa98a-2829-4442-82ba-1369efa2c53a", "comment": "Malware payload (Mirai)", "value": "58b186d458c28353bef4661768d909c659f7f399406f3a22a43e900166463fa3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186926, "uuid": "f434feec-b6f8-4330-8676-58263be997b7", "value": "T147D33A05F5508727C2D327BAB79E465E37331BA493DB33215A34AFB42BC27891E399", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186926, "uuid": "0b472650-b600-49bc-b377-b7339d3c1bdb", "value": "3072:AZJaCSEXv6sCU7u0mEBFR2cj1WBwyDvpU+mXQ9azXN6X:yJaC7Xv1mEvR24+xU+mXQ9azN6X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770186926, "uuid": "730e44bb-be82-47fc-b5ee-e3e91379fd72", "value": 134109, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186926, "uuid": "31dc34c9-320b-40c7-b7a2-71ba84a172fa", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9c36cb9-0132-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770187081, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187081, "uuid": "98694753-9b96-43e4-9a38-f0ec74456649", "comment": "Malware payload (Mirai)", "value": "88a7b2a6b369b6fb88a573c99feefa5b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187081, "uuid": "796a5784-77fd-47e0-be7d-8cded03877ad", "comment": "Malware payload (Mirai)", "value": "48737f8fa20358f195fb9670e6ee0444c9760f50f02bda7d78472dbfd0a08bab", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187081, "uuid": "d9ba6e75-1745-493e-aa30-876c6776bf91", "value": "T1C6D33A46EA418E03C4D617757BAF424A3322A755E3DB73068D18BFB03F8679A0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187081, "uuid": "54aa335c-8666-48bc-ad47-df521036f3e9", "value": "3072:ditfjAZh67HKpkcHSCeYn5egAXwFDKuwTM/9OdfI3:AiZhnkcHSC7QgJBKuEM/9ORm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770187081, "uuid": "8a35315c-e5e0-4301-a732-3173354bcee9", "value": 140329, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187081, "uuid": "73d632fe-18e1-4ba8-bec3-feb9feb2ec61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e8e113d7-0194-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770187449, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187449, "uuid": "09b37175-c903-4207-a105-20cb9d92eea5", "comment": "Malware payload", "value": "a817352d2ac3bc805f0b0fef647dda5f", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187449, "uuid": "04d991e4-8804-44bb-84d0-8d291095b15e", "comment": "Malware payload", "value": "a308bfb40184363e3659fd4adcfe667bbcb7f4ea35b79bb96cdeb0e8ab582858", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187449, "uuid": "bcd1053a-9d88-4d64-be08-9d491b882605", "value": "T13144AFB276C14DB1F9E7003545726B2B7A36FE041114DA93FBECAD4DEB721025B1E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187449, "uuid": "a98df881-e381-45eb-93d8-6d2a1d51e071", "value": "820af80ed1df59245b4dc1089204da99", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187449, "uuid": "43421142-0781-4eb1-8a49-ee704b628317", "value": "6144:zMix9CS5Fn6SXQWdyaDTIa70FSZC8iFqjrv+HHLON:wix4S5Fn6SXHdjDT/I0ZC8iav+HHa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770187449, "uuid": "8ed69e2b-2be7-4605-b7af-de06048bdcee", "value": 265944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187449, "uuid": "7903327f-aa92-4888-8637-3cd62bcf88a5", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "037a39f9-0195-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770187494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187494, "uuid": "c5c0fe53-2583-4214-8a3b-d81a3e78b045", "comment": "Malware payload", "value": "389c1265202878f5b39556a0e031c61b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187494, "uuid": "831e9497-2f68-430e-a81f-4365f2e4c7c9", "comment": "Malware payload", "value": "62ace7b8e669c4d7db4d5518058a0a2a8f23fbc9f72c2ceec18e5acaaf828f6e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187494, "uuid": "228e59ef-cea8-4c59-a4f3-9c7ac5dbfeff", "value": "T1188308327589582A210B028FD263336C70FFD8E2D611E5B6F6F922344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187494, "uuid": "784503c6-b63b-490f-8f5c-12d4210424db", "value": "1536:XJyp/QdMqpYJKNoCtpxD3t2ZSDXpdyr2pbnNWaeVN/:XEKltp9t2SX/yr2pbNWHVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770187494, "uuid": "fedd1ecc-7fb6-47fb-a576-464b9e011642", "value": 85051, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187494, "uuid": "4a094eea-f710-4318-b9ae-6f661c81a90b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "13e06dd1-0195-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770187522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187522, "uuid": "731edb20-3b76-444d-958b-2a59320db414", "comment": "Malware payload (Mirai)", "value": "4e709a175ae13124bce2539b036ac7d8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187522, "uuid": "1edc59a8-f70c-41da-9b7b-d0710819d0bc", "comment": "Malware payload (Mirai)", "value": "40ebc0556d1cfccebac20196a1473be2d298736bab266dfa853c539691c6233a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187522, "uuid": "65cc8423-4c44-406b-a53a-da262ca26b4a", "value": "T101331985BC918912C9C42377F61E01CD372663E9E2DF32179E226F1177CA92F0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187522, "uuid": "80c51dbb-e0df-4d62-acbf-f07a027bd028", "value": "768:pIgyxzL/ynKLEbo6pQvgDKehSG+EMon8rt7RBNOFTSLLKmtN:/yxzLaniEbo6pbmehSrEEWSiW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770187522, "uuid": "6bce1cc3-03a0-4340-a06b-04d49c598144", "value": 54864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187522, "uuid": "a2b48240-8133-42c5-9241-62b84c006a07", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fbbb1dd-0195-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770187568, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187568, "uuid": "c67a0006-87fb-4f34-be03-ac83193aa6ce", "comment": "Malware payload", "value": "529beebc1041ea6238546e63087a5375", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187568, "uuid": "d27b6ac7-793c-4f38-b325-14bce127a218", "comment": "Malware payload", "value": "5c7578f6660d5a6b4d8a75b9a8d46020456ecb6b394209a58a1e7ccee0591ff4", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187568, "uuid": "db859bd4-7c30-4f60-9924-a126e60f4e1c", "value": "T1540733A15DFDC8A4421870C62A6D07A8677563EA8C559C0392C025F2E43ABDDFE4F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187568, "uuid": "8f9aa179-55d0-452b-8683-999c79ec286d", "value": "393216:5zPFjYDYF8/B6cQk3sdhlHzVW64kzd0Ly1zleyNZ7H7C8QE6sa:TkYFAlIbDW6nRf92", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770187568, "uuid": "472db727-b184-460d-bc46-7ca7d1a444e0", "value": 16866459, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187568, "uuid": "863fc3ce-b6a0-42a8-9f2e-762eafee763d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1b38afcd-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189252, "uuid": "fc981e90-ec04-4ff0-841e-228f11f9df4c", "comment": "Malware payload (Mirai)", "value": "d9f6460ff9b79d2d6dc2098e6bade753", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189252, "uuid": "e6dad030-b0ca-4b77-a493-7d9e085562f4", "comment": "Malware payload (Mirai)", "value": "b429c0359cc41e3f79142f797f6995d004887704b9cfcef4797dc01b0c0d1606", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189252, "uuid": "032bfa25-5554-4c3d-b61b-824cea86b0a3", "value": "T161739E77D06C5DB0C4544A7475A8D9B44B136904A2A33FF1CA828F699407EFCF22AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189252, "uuid": "f2cc97ae-fe19-4ed0-af5c-ae7b8a86846b", "value": "1536:G/kmntaTh/xHGTtESB37Q0pU7edAfMCgGdk:GMmtG/5zSBrTWedAfMs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189252, "uuid": "f7ad7f55-be94-41c1-be92-49b0f8815b6d", "value": 74772, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189252, "uuid": "d43fbe2b-2021-4e81-8051-a27080f7bd00", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "231d7c74-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "3b3654bc-8b45-41fc-811a-60a6633e8eb4", "comment": "Malware payload (Mirai)", "value": "c5dd1035f2f5ddc158d6c0e52015198a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "709a5edf-a517-466f-80bc-4193380db1dc", "comment": "Malware payload (Mirai)", "value": "5d7b181f932613223dce553bb181778a00f2733f083a2f1e06c2664283b211e3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "9f507baf-b1cb-44a5-8f32-849a302673d5", "value": "T102B3930A7F600EF7ECABDC3746DA2749249D241A21997F75BD34D818F24A24F19E78", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "9fee72c1-c6e6-47f2-8bc2-ed62d616944b", "value": "1536:XLRytC9YrjD+jr8CDaOs5ViW1GmMf0yrSxp8NMjhZKmACctK:XtytC9YrjD+jNDCF1GpMjhv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189265, "uuid": "e203ce6d-836e-47b8-a095-169b9d587b43", "value": 108704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "65030aaa-f0b6-4363-b040-21a8ac678a43", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2320a9d6-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "7720a828-ef69-482a-bed6-5c63eac6dde0", "comment": "Malware payload (Mirai)", "value": "2a5f0c1149f46406ec4697faa0d2516d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "d0933118-4b9c-4246-9ce5-e9541c9d8c40", "comment": "Malware payload (Mirai)", "value": "79d7f9ea797edd9608ba268468b21308f29799c0d92daa25b58f8ddba842bd3a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "1e222d60-d526-4cf5-8d48-165640059d7e", "value": "T1D9734C42B98486FDC189E47902BF7576C426F1BD2239B1E737C4BF1B2C09E601B1E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "52d6791a-a9dc-4a07-930e-4a2c77861406", "value": "1536:wM1FaL5wJ6x2oYIsJNbmtY+Oqeoe14PW0MPTqDy3cEN/CMMU9O:fYG6x3YIsJNQPOqK2PW0M7wy3D/Ct", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189265, "uuid": "ccc91c95-d169-4171-a9b8-bae9fc569c67", "value": 79520, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "12820c58-23d4-4cf7-9eae-8280bc109722", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "232af446-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "97260ac5-4449-4e09-be06-847838620a50", "comment": "Malware payload (Mirai)", "value": "72bac92191f77e5bec7cacbf8d0d302c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "a0afcd07-adcc-4eb8-bab8-6c52bb5e3bfb", "comment": "Malware payload (Mirai)", "value": "bc660f9d823df175e12e1ce78418be1ea0d92585e2cd5432fe2590ae41884876", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "58e05b31-b92b-4672-8762-39d0123c69cd", "value": "T153932A86BC409A11C6C50777FA2F108E3312679DE2EE7252CD141F747BCA91B0E7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "27fa4bf2-9994-470c-b8d4-e7e2a645fe99", "value": "1536:+pnZNBtXSTB+lrX1/pxMr5SRH9rgvtiCJ70qpdVprPgGzoAIdiLlaRm8Ye:6NfiTByz1/pxiUl6YqpXpJlaRm8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189265, "uuid": "86191bbc-e043-4473-95a9-0dd5fd52c54a", "value": 92736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "72582ce0-b117-4e27-a035-6499365af43e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "232e1caa-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "9140e96b-513d-4bba-ad4b-e7a24ab112dd", "comment": "Malware payload (Mirai)", "value": "1eea7cc07cc70c099b41a8e9747b81c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "0dba9d4b-c2b8-47f4-a911-a1d236f50cdc", "comment": "Malware payload (Mirai)", "value": "ca990677f4d806eab84ace0ae3a1e4c0c10173dd7722314b9074effb64236925", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "45cfa469-7cd4-4133-aa99-e40ce58a92be", "value": "T16DE35D86EA408A13C4C61776FAAF414D33229759E3EB73068D185FF43FC6A5E0E276", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "a5b8cf99-64f7-42bf-9a00-876d39f9b0a3", "value": "3072:J5tQmxVagaEWnPmOYqpwVJJjoSWQcfhcwUfOJquM/9Lvr8l:TvxVwEWPT6JjoSWQuhUfOIuM/9Lvr8l", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189265, "uuid": "cf2fda26-d88c-4cd4-b079-c418a744a608", "value": 157015, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "978dc283-601d-40a1-b364-eb5e76eef87b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "23300390-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "c84e9208-ddfb-4b41-b78e-767cf1d7fdac", "comment": "Malware payload (Mirai)", "value": "9ed45b57668fbf9f8cdaa1bac51799be", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "2d19542d-1f23-4449-93fa-6183e4bdc2a1", "comment": "Malware payload (Mirai)", "value": "6df4fec58306a6aed88c61a097c0df55ed93b2327a24b76cf935c12c328db52e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "6e13d4aa-778c-4954-b899-2476f0220dbb", "value": "T194735DC8A5C3F9F0EC040A783077AB71AD37F53F6179DE9BE7E96563A84160291022", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "34c7b5fb-0c74-41b6-ba5c-910247a36174", "value": "1536:oJCMny54LiYugKbKz78/2nW6r/G81XpQkE18HbZNWNy44bzEleyb/4i0tum:oBnyqLiljiw/2nDr+81XpQ/CHb7cNj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189265, "uuid": "45fe6d3b-e88e-4784-8921-1b85dafdc146", "value": 74512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "85697941-86a9-4519-a160-780751a2a9e0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "233428e5-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "55213a1b-3214-4198-bcac-8bda2b746b0a", "comment": "Malware payload (Mirai)", "value": "07a7f7f27fc44f761e7c2d62950d1499", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "5d0541f3-07b8-4f18-acee-252f2ffad0f0", "comment": "Malware payload (Mirai)", "value": "4ebcfee9d5a2dd5534b90c9d2a7e890a80a85b032961a5c8192c2f6d9aaa9f09", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "4c145451-ca02-4c63-b7f8-1614087f60f1", "value": "T1C0A3830E7E319F7EFBAC823847B78A219209339666E1C584D19CED026E7434D741FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "1a0beae6-9e85-485b-bfd4-83a36fa10a9f", "value": "1536:cF5twgB0FavGLCpCiwxpmNtU8QbKpEPW9U27np2twnfRzOdZ/:uTwgB0mpCismNtU8C+j9U27np2twntO/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189265, "uuid": "520b76a0-053e-4935-a5fe-bbc8fec03f9a", "value": 105216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "889f3348-b180-4fa4-a44d-19fd6e65b025", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "233616a0-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "2c4cf2ef-d1fd-4479-9ca8-95e1415e871c", "comment": "Malware payload (Mirai)", "value": "af0002e7266ad0ca9e5a42c777358e1b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "cf8fc810-89c6-4aed-b0c3-2f5bcf570ce0", "comment": "Malware payload (Mirai)", "value": "ce1a04e8dabfc5335d299101ac41ee2b5c31131cf2458419fd650da81d2ef75f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "b76a215c-e9f1-4760-9a58-9b426940f0f7", "value": "T1F5833925A87A2E17C0D4A13E12F78715F1E6330E14B4CA6D7D7A0F8EFB54680A55B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "cd620c86-6f44-4624-9d0c-d73d5354397d", "value": "1536:xUhFY0ZhMjMOsvlWQVyCzc5kJz0Qq8V+n17mWY18rjE:qlIoOKDykJzvV+n1O8c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189265, "uuid": "608bedd8-665f-420a-a22c-ada803ff32ac", "value": 86664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "06d45860-e3db-4dfe-a78f-a16f2025aeca", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "233e9550-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189265, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "c5076413-48c5-42dc-a220-e0b9bd008002", "comment": "Malware payload (Mirai)", "value": "ee1d780df69354740d02ebf228bfa5e5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "1a67ac60-4b9d-4fa5-a885-82aae2282a9a", "comment": "Malware payload (Mirai)", "value": "98d80783660c26037d3b3c32a1f2f5ce2bb2c2d6a5104a46546adac75b9f3f0d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "2a36bf8a-2995-420c-8f4a-c30c59f87e35", "value": "T15B730A82BC40A62AC7C0177BEE6F109E3310A7DDD1DA3246DC155BA47A8AD0F4D77B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "d9885785-39db-4ba8-a9ca-1aacb9ee19da", "value": "1536:mAuFbl7Sfgy6BKDsVdWRNmkiQ5YqMornay7B8t461r3XTe0:4FJSfwh6O8DPV84Grn/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189265, "uuid": "6385193d-688f-47aa-8a96-b5c2c1bb170e", "value": 74984, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189265, "uuid": "0ebc2d7b-ad35-46de-a545-ab12702318f5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "44691592-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189321, "uuid": "fa351554-ec92-40ea-9c87-0798191574a4", "comment": "Malware payload (Mirai)", "value": "9e8a5697b45ec78bd5ef0315b9dc0c89", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189321, "uuid": "971f4d41-7431-4385-a48e-6c018e947221", "comment": "Malware payload (Mirai)", "value": "1f86d7a4d822aab57efce5b3a19d335510d41a0c47ab75c77887084c3f2412ca", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189321, "uuid": "00214dfe-9eb6-4e57-8ce1-180aec816057", "value": "T10B733C0137588F07E9AA4EF9282F17D083BEEE4011F5F1856A0FA75A4235F33595AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189321, "uuid": "f50b58da-bbe9-44c0-aa77-0fdbbffe650b", "value": "768:3HgGNDHJU4h1XZRMbR0OM+yjRXnmNdeLyJ7RqlnYK+dLeDq27aU05bKY2W6hchUZ:hDp16z05yJ7c+dj2W6hb6XrjVe2XQ19", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189321, "uuid": "45764f03-53d3-4b4a-862b-a1bd47287b92", "value": 76920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189321, "uuid": "b4e0c8af-69aa-4097-90c1-ed8cc678f46e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "446fdc27-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189321, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189321, "uuid": "c6aead18-a994-43ce-adf0-677de7baa54e", "comment": "Malware payload (Mirai)", "value": "2fb3cd64aa7e37ad2d1edf8b69339664", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189321, "uuid": "7ba88e7c-8d8a-4807-9d5f-3b154bfdbe80", "comment": "Malware payload (Mirai)", "value": "dc953cbcebd379f4d7de1aace5c7802abeb48b0f828d678645fbe92541198781", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189321, "uuid": "7a760226-9149-4135-ab73-7c5a266fa977", "value": "T14D734DA974018EBCF98BD5F981160F0EF42163059B930F27A66BFEA37C630A59D07D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189321, "uuid": "af771ee3-866b-47c9-abd8-13f2384a02be", "value": "1536:BweLSd7Sjy/elVNdmXpvxhpOn8YgjWzkjtNppe8xXQfr:Ljy2lVNd8pv7pxtiyNzm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189321, "uuid": "7258fda2-df42-4e38-984b-c2cee1bba7d2", "value": 78224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189321, "uuid": "b7f38b85-ef6f-4930-9468-c135f73cd47a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67bf40f8-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189380, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189380, "uuid": "0648dff5-2101-42a0-85c6-0f69fa83d3c1", "comment": "Malware payload (Mirai)", "value": "e435ad20de5610a020606e6d9b61cee5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189380, "uuid": "a2f5fbfb-3853-45d7-9c9c-4f4284362b40", "comment": "Malware payload (Mirai)", "value": "05fc923f9d831515ae156068652a18d94b33b92e995bde3c8bc3e55a984e0e05", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189380, "uuid": "7c86af2f-b8b2-474c-a1e7-89d521811956", "value": "T17D831882BC40E626C7C01677FE6F108E331567DDE1EA72429C255BA07ACE91F0D6B7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189380, "uuid": "aef43252-e3db-4e00-9884-ce39869aba43", "value": "1536:sZCGuzEFBkqLPPdE5B3jBjNzVK9B523+JO0W0B8t46/keN7YJlQUe:ACGzBkR3djgROV084okK7YJG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189380, "uuid": "40a0cc57-3302-4f93-bd37-f7e5b8f43fa2", "value": 83028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189380, "uuid": "a2ea2186-3257-4c1e-b1e8-7c6958e8315c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71bc57dd-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770189397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189397, "uuid": "59038efc-b4dd-4abf-be8c-229f1c125d4b", "comment": "Malware payload (Mirai)", "value": "82845dc5a43a83d8336e1da3f6fbf1ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189397, "uuid": "79eef21e-92de-4e75-89df-c1143f2f8c2b", "comment": "Malware payload (Mirai)", "value": "574a4e182c529805b9a816175bb1064c80ac3e1ffcea385648bec1b80d2d50b6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189397, "uuid": "bff1cfa5-3e36-4dc8-ae6f-e9a226b9174d", "value": "T102B34B037B1D0743C49B69F02CF73BF18B69B9B116A361C0A21AEFD45772AB02526F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189397, "uuid": "c0f27c2b-81f3-437c-babc-ecb4e3158520", "value": "1536:na2jlqntGrJ77nScc+i4KT1FU2muwpVJ071oqia3jMmJ47VTJ5SzuPfO:nh8tpfP1K2K7J6o7aTMmO7VTJUzuPfO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770189397, "uuid": "7dea3309-44fe-4cbd-88ea-5f4b17cda9b9", "value": 108211, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189397, "uuid": "23a628a2-43d0-4f80-a3d2-754cce021912", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2cf73ddf-019b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770190141, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190141, "uuid": "2d2d98d3-dc08-432a-81e0-dc9e3025cc88", "comment": "Malware payload (Mirai)", "value": "36c2881f0077ac48e8374af6523ca363", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190141, "uuid": "7a55c7c4-56bf-431d-98c9-1dff1b50db27", "comment": "Malware payload (Mirai)", "value": "411f5466b228165a6db2852ce930e5716b4108cc55aa3a4c9068c72c2871fbc2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190141, "uuid": "82f785fa-f511-415f-b87b-465bbd9c938a", "value": "T13BB39E9BB70B6291D82186F00BCB4FED2E2333128F67C9E76D0E253A59391DF49063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190141, "uuid": "5fed8e5c-5207-4f02-ae8e-ac189c15363c", "value": "1536:dQEKKlutXQuqu285bVzMXK87CrmP7gdw/LWm:JKiuhrL5ZzP87CrmjgKq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770190141, "uuid": "1574a4bb-65cc-478a-bf46-48a667fc68e2", "value": 107804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190141, "uuid": "7558bdfd-ab57-4ed2-823d-9ad2f2c8cf99", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c549607-019b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770190274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190274, "uuid": "d49c8e02-a10e-4753-9c46-685f4539d5fc", "comment": "Malware payload (Mirai)", "value": "2cae31fbe331428183c9d602a9d674c1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190274, "uuid": "339ac302-33f5-46a2-a9c2-7d15d1ceb51a", "comment": "Malware payload (Mirai)", "value": "89b6cae09fcf37842abf38e59af90a32faf00bd6cb3bc39fc7d4fba8ee0eb2db", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190274, "uuid": "490df16f-96fe-4aa0-a3bd-d72c01a5f716", "value": "T17C237CB3C03DAEC8D25C43786A354E3D9713E10597532DF6668AC666804BEACF60E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190274, "uuid": "c21881c6-6240-4ba1-9f3f-5f8254824a29", "value": "768:Gax/fvXvD56gqt5m7TprHNNhLOjhXtjqD6PCoC6pNo5FpS2CihTN:Gax/X7mXqjNNh4zPbpC5q2CiT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770190274, "uuid": "72cb1c18-3fa2-4393-bfb2-1b1319e890a7", "value": 48700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190274, "uuid": "38a94fb1-b63e-4689-8364-8f94a784d360", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1020693-019b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770190416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190416, "uuid": "6f3c7a7b-b74a-40b3-9f3f-3b9acbc2ca8d", "comment": "Malware payload (Mirai)", "value": "c260f127d0074951ea0a1cb011ab7bc1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190416, "uuid": "2d0762de-3e25-44a9-a0c5-1ccfef86e4ff", "comment": "Malware payload (Mirai)", "value": "e5ce6d08babac52299d283e88d42b7860ceac8deb46d6afba87dd9f2fa524c1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190416, "uuid": "ad640dcc-24f1-4798-a262-f715b6c2adca", "value": "T188E3952E7E22ABBFE169863107F35F70879521E227A19381E26CD75C1EB124D1C5FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190416, "uuid": "7944557b-1887-424b-881b-7f0841e966a1", "value": "3072:lc9sAghas4PZZUD9mvdCG6MVE5N6VzJ+r4EEEzXjDO2/lkmk+WFiBdNCZO:PU88eXjK29kmk+WFiBdNCZO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770190416, "uuid": "02d41516-10a3-417e-884c-210f7fd3eedd", "value": 143294, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190416, "uuid": "fcf9dba8-0aea-4585-81e7-1509f7907994", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5cf315e-019b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770190424, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190424, "uuid": "481681a9-202a-4a5f-a0a0-3dac2226ac45", "comment": "Malware payload (Mirai)", "value": "ce075f335628dfd1d04a0311240a545a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190424, "uuid": "c2f65c77-48c8-4750-9bbe-b09fcd3dc5ea", "comment": "Malware payload (Mirai)", "value": "251163674565c6a0dd9a9c1a2ae2670eebe4de708d424556c9d24515083de6d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190424, "uuid": "7273c470-a5fa-4db8-b4a9-b044374f61f0", "value": "T1C0638309BFA51FF7ECAFDC374AE91745258C551A21983B7ABD34D818B24B21E05E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190424, "uuid": "9a11155b-04da-4ef3-887b-03c49d155ff7", "value": "1536:oSgYvXcVrQK9s2jyDINakg9E0heNRjqm7ZvrVla:oDYvXcVrQgj53me", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770190424, "uuid": "3183464f-f8aa-4945-a4ad-4f2c7fc1332d", "value": 71668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190424, "uuid": "b1721265-8160-4e41-956e-32593572041d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f82acea5-019b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1770190482, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190482, "uuid": "70e966ae-621b-40c0-973f-8ef3b4df6c41", "comment": "Malware payload (PhantomStealer)", "value": "5c585101ce5dadd2d0ec8ee9c3e513b3", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190482, "uuid": "1dc9f840-01d5-4ef8-b06f-985c58d3cebe", "comment": "Malware payload (PhantomStealer)", "value": "4a34e6614acd4a138eb1f308c21be91a8f0c53f00c307a1a5cf2a178182b62c4", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190482, "uuid": "6ab685ef-6035-4f6b-8a31-49c959995856", "value": "T16A061110C95ADE96026C8229206A5E8726604EA78C447B7A7F9F8F8D0F4F10FD5753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190482, "uuid": "85621803-2f97-4c1f-8da1-a2bf8eaa73a8", "value": "49152:IwzolxiByYZ/uLGNcBJYz7lTLYgh4ThXjCTHtsZEVvWW:D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770190482, "uuid": "d7c939ea-3a74-4b4a-b7f8-e963e33ce5f1", "value": 3730033, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190482, "uuid": "c01a301d-4ac7-4928-b6cb-26c6a5558f5f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0702dbac-019c-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770190506, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190506, "uuid": "14ce7b83-1b04-4dc5-b434-e242a917cba9", "comment": "Malware payload (Mirai)", "value": "1d7f5fe93a49193020ab25f13ae6c170", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190506, "uuid": "b2c6e7a1-ba1b-436c-ac83-786027a729f2", "comment": "Malware payload (Mirai)", "value": "50eb5a50663c0bf0014577b2abe1baff453aebc6a109aa7c283dbbbf20f7998f", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190506, "uuid": "87caf091-cff8-4a7b-a9c4-0bde0cef3ab6", "value": "T1D831118E64B412CD89CFCE4070E54DC8670B9592F1942732EDC20E6BA09DD6434ABF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190506, "uuid": "33505776-f65d-4475-b018-83eae5b4540b", "value": "24:9Ddc+1mnmBM/h291bBV2wK6fwo7mgKLJ54HH9:c+1m3no7m4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770190506, "uuid": "c1caf886-8421-46a4-ae8f-f83cec2fe4e9", "value": 1845, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190506, "uuid": "26fad947-93ac-4c36-86a2-17679da97812", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9113f99-019e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770191772, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191772, "uuid": "aefc4278-d3e3-41e8-91f1-49f2c75b1dd1", "comment": "Malware payload", "value": "ca61edd1cae3c9d0fb644aaa97a2d79c", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191772, "uuid": "5235fc31-2688-4279-ba0d-c1bf0573ff54", "comment": "Malware payload", "value": "cbb7f106983ada5701c04030611df1e59ef7cb5431613d4d9c852a19af3d3bf4", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191772, "uuid": "94e9feb2-aee1-45a9-9750-5a5fe6ccb204", "value": "T1B596332F6C785BEFFA0E62339150762E57D263235BFB3368DB32258B15F90150BA22", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191772, "uuid": "6fdac999-47c0-4a88-9d18-d359e1821bf7", "value": "35a81d16af9f2ba6d515f11152d0364b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191772, "uuid": "a37fb979-d363-46b6-a568-c3d36dd1690e", "value": "196608:Xotj58MeDADXlIu2WqCpNiIN7ZMLWbSz/+46x2AVDsnED+U0cN:YtN8MlxRqClaWbk/p6JJs1W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191772, "uuid": "f1617df3-be16-43cd-86ef-be43d688a613", "value": 8834968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191772, "uuid": "10393640-0909-4d0f-a9a3-95031d1a3370", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cf20a7d-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "ee1bbaf5-6960-48b5-86ec-97564978402d", "comment": "Malware payload (Mirai)", "value": "e186d25124b81dd6f1c0c30b43612150", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "f58ed373-2a19-4263-8009-99da41cf1dd2", "comment": "Malware payload (Mirai)", "value": "36468c20d264ea58e811b26112b17355c610f9e800ef5a2b6ab660ae28da7c73", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "d4e360e1-083b-43c1-84d1-5a29abbc0c12", "value": "T1A732C517A7BBAE1BC4D027771193072162E95F916024472F7D0D1C8E6E9A3412E3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "1a515082-7397-43ab-a0e9-5602a75564af", "value": "192:xvrOR1CQOsz1NxfAz9H9iG0GhWaDpU/O7Q89AGSybfqeif:xvrbCzfa92GwIU/kwGSAUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191832, "uuid": "fe1cb11e-6b84-47bb-b51c-54a62e7426f3", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "b4e9250b-a425-4cd4-b320-bb7f19a5331f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cfd4bca-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "cac582f4-80f5-4107-aea0-7e7911c56984", "comment": "Malware payload (Mirai)", "value": "0663ea084490c2a5b5f8abfafefeb2a7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "27cc38fb-fce9-4c0a-9170-0ca3fd9848f3", "comment": "Malware payload (Mirai)", "value": "a1a959b80cc8d75a4631444492b52d70b9ce035d6cbee1c28a685580585b5805", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "8573308a-fcdd-4761-84a6-558b2a0a6912", "value": "T125B30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "eff457b9-18e0-4db9-9a08-9ee547df874a", "value": "1536:D7jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxn:PzPqF41OUBljSIxecUtCR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191832, "uuid": "ce3f93b9-c393-4212-9483-9bf6819cec2b", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "69b3c309-043b-49c1-a1ba-07ef6aef4063", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cff3101-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "0b4f245c-d069-4f96-af90-4cf8d2fbce1b", "comment": "Malware payload (Mirai)", "value": "1444bb876e983b49fab9b5a20a1bf250", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "adf7cec8-7420-49d3-90ee-acc2846c924e", "comment": "Malware payload (Mirai)", "value": "97ff91263d654f2e91f066adeaedc41269b037eb4e15662acda0f460f8ba6eb8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "6619ac31-af24-4354-b0cf-c9d7438b2d04", "value": "T1A623E1BB8719D1B8C37799320F4943CDD7BDB81569165A2B9ADA31FBE0232148C34B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "e4c678e3-747b-49ed-a7ee-991c7c59de07", "value": "768:xZbRiuoU7K7guxHGETlQ+UFN+JzZKXYt+tPXXraqzXORnapQ0K5KtPcaLsA4Z:Zi1U7KkuxHFy+Uv+JYXe+xnuqzXORsKt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191832, "uuid": "921cc7ba-4d05-408d-9b16-a73de4e0b4e2", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "d3c502d1-7751-4608-8623-20bf9df948cb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cff5236-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "5072eb31-8e72-4586-8efc-64fe0db3f091", "comment": "Malware payload (Mirai)", "value": "6bf328d8b901f2eccb181a5ac9261fb9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "e1db7c34-aeaa-48c7-be48-6f9091b4ccde", "comment": "Malware payload (Mirai)", "value": "66bfd1c57bb7dc12ba5a712af051bdee07aaa52d4065d4067b26023d2f940550", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "3adacfa8-6c73-40d5-b4aa-f57b19d44803", "value": "T19CA328A3CC766F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "7fb25939-0f2d-40da-bb52-627ea5c5b053", "value": "1536:7RufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXAr:8bU2RC4kPCtSzWu3/3L1r", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191832, "uuid": "1efea38a-978d-48b8-980d-41b90eafe3fa", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "8d4e4bc8-60df-4da0-911d-e2c606e0ca1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d01cb0c-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "0c117962-3905-4803-9b21-3df56c76cab1", "comment": "Malware payload (Mirai)", "value": "8282bf9926204683bfe48ef03888b601", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "8addbc85-be4d-46d9-a1eb-92d11461e55f", "comment": "Malware payload (Mirai)", "value": "f1cdaece1890026be4adc17b0d11a0a4eea9d11d953047edf8078bfa5688d587", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "9587eec6-e857-48a9-a91c-c07b401e8bc9", "value": "T106333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE66AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "1a228e4f-54bf-4856-8ec8-62f2792c4a80", "value": "768:Zw5A3X1eCZWUJ2SNpRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98dN+s:Zwkt3NpOzwLMU431ANA0BLBCxr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191832, "uuid": "a3e0589f-5ad3-4c82-8749-e8e0bcc3b1fc", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "4257fc4b-25b8-4e76-83fd-982626bbd89f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d0334a1-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "e486b331-39dd-4cb5-b754-335a5f6172be", "comment": "Malware payload (Mirai)", "value": "83592441be77799721a9c1d8896fc03c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "02a946db-7058-44e0-9947-fd0b6205a743", "comment": "Malware payload (Mirai)", "value": "e43183dbb41cf7c66de3f33898dedda25430535c183a4f096d1eaa32c7fbcba0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "43bb3c07-4fd5-41f5-9d3e-7a4d1eca4778", "value": "T1E6D308C7F900D9FAFC0AE7374853080AB230BBA545925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "b85d7713-7d74-4506-b01b-02e9117b07a6", "value": "3072:aXbul4MGHJvkrybLutTK/OwpiZdDoOPVO6V1jbiALNHFIGx:3rybytG/Oyi42VOgLNhx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191832, "uuid": "48eb1ec7-eb02-4cee-b4a2-cee1bf858924", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "b8afcb31-0c8f-466b-9f2d-7460f51dd3b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d042759-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "cb48e8ad-15b8-430f-bff9-7778f35a97b5", "comment": "Malware payload (Mirai)", "value": "c01fb5b316674721b6c07a8f20c50ca2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "7f8be801-a5d2-4bb1-af99-087567cb2113", "comment": "Malware payload (Mirai)", "value": "81f3b5c089e018318bdb3fa94e11acd72440b657717ee428ece1035705f4bb82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "fb771a36-8015-43f2-be03-8d977bf855e3", "value": "T1B0E3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "1af31534-7471-4dbf-898b-f65e003bd570", "value": "1536:p+PTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4VxtdbK:polybKpzEOfGQ+vEubTt4ouftL4pdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191832, "uuid": "524430ff-8614-4a00-aa15-8d09a39ee9ae", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "96c8b466-8430-4afb-8313-2fa3f78790e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d095624-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "2dc4ec8b-28cd-4aed-b9df-f9dfca645d5e", "comment": "Malware payload (Mirai)", "value": "6a92458a7642455a50a44533b518753a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "4cd6df42-875d-4366-9779-e7586d5bcbc4", "comment": "Malware payload (Mirai)", "value": "f5d72fc2d4815915fe0a4b83cb0235b36602f679c63a32575c97d97baa796bfd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "513b8db9-5761-4344-9abc-71c6a4fa88a2", "value": "T146E3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "5897babd-9238-48a5-8b06-38aecb11cca8", "value": "3072:KxjJw1Cc/0s6YAPwenUr48pzfR+JonBy:Kxlw1xAop0YfRB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191832, "uuid": "e905f5c6-fd01-415b-83f1-1b2083ffbbcd", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "39460c3b-c20c-4491-8808-41439622948c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1d09c0cb-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191832, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "24c24648-4c2d-469d-a1f4-880f276d61a9", "comment": "Malware payload (Mirai)", "value": "f68fff6c1b08fb9e208ea37640b782fc", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "64eeb1eb-7234-4b7a-93c1-a89cd9dafef8", "comment": "Malware payload (Mirai)", "value": "1cbd717a85a0a385bf3803497cac556910dc76c0c206467cacefe582b655f57e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "ec81e74c-5324-40f3-ae3f-766db8d42f63", "value": "T154930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "bb254a5d-aca3-4d8c-b63a-db48d4e324a0", "value": "1536:wqnZE8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1YPn:M8NUv5nTacgzafVAwe4BNRIbT2gXI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191832, "uuid": "aead8fa5-0ed2-4a5d-b996-4e6c1b765717", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191832, "uuid": "bfc0c549-9b78-4fce-bd3c-4581718785f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21d5238f-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191840, "uuid": "d909b349-1803-4128-9e09-9df5e6ba6de8", "comment": "Malware payload (Mirai)", "value": "c8563ca81f26073e5b38208cf3468c6e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191840, "uuid": "3ac81fe5-6981-4d8f-b026-d4db6485e522", "comment": "Malware payload (Mirai)", "value": "7b4d33f3f6e14a5a929d778588cdf1fb82c939037610c88c0f0a0cfedaa43ea3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191840, "uuid": "280a5782-53fa-49a4-a7cc-31aeea6af82a", "value": "T106B30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191840, "uuid": "7801ea5f-430b-4c23-a466-78977635722b", "value": "1536:dUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45ZvE:mixnUHz4Z+5ypkn3E8E", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191840, "uuid": "0374e891-6a20-41ac-9d45-64945a2eeec7", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191840, "uuid": "bc84d941-eccf-4ca8-8fb2-4b2c7bfacc91", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "21d6fde9-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191840, "uuid": "91934c0c-38c1-4dc3-836d-476b82454728", "comment": "Malware payload (Mirai)", "value": "fce1ac7432d1a94a4f4e8a2d583f602d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191840, "uuid": "95c7611b-61fb-4a59-90a2-28c54acb9f58", "comment": "Malware payload (Mirai)", "value": "4fd3225dcbd9cf14b2ddbf4f245463f81558e76e718efd03b9073c7863fcbcae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191840, "uuid": "669aaf58-15f5-4cd8-8eee-0458ae6ac15c", "value": "T1FEC32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191840, "uuid": "a7f7fb5a-444f-4d8c-8bf1-203b445d5883", "value": "1536:6oB72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dBJ:6KB4exMF7oZKJnCNYavJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191840, "uuid": "a9a398a9-0418-415f-a9b1-d75684ae996e", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191840, "uuid": "c2b7e502-2970-4361-8b8e-f10c48153a12", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2499e90a-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191845, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191845, "uuid": "41200daf-e649-47fe-bb9d-11e269a45622", "comment": "Malware payload (Mirai)", "value": "c7beba5cc84ee113a3a647eeb973cbc9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191845, "uuid": "7af4bbd0-a061-4093-b0b8-edfe771c62d6", "comment": "Malware payload (Mirai)", "value": "6e29b244afa34e79c0dc5ac4d38f6ace3e9e049996ab9fcf5b697ecd0819a5e6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191845, "uuid": "702780ef-eaf7-4a63-819f-e2f12606c0fd", "value": "T1A3C39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191845, "uuid": "ec8396df-e15a-483a-960b-e24bbf629b5f", "value": "3072:0f0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU4wqe:0f0tJBR4NSALD7rnCrheibqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191845, "uuid": "feb30893-ab56-4f29-afa1-3178f346c3bf", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191845, "uuid": "406ab90e-7499-40bb-bd52-1938339c489c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42e292c0-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770191895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191895, "uuid": "f4b9ee03-7d77-4e0d-9885-e4a9477e486b", "comment": "Malware payload (Mirai)", "value": "4360814adb8d0452ab9246a0bcc2225b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191895, "uuid": "73f40740-bf52-434b-8d23-b02bf50b80c6", "comment": "Malware payload (Mirai)", "value": "811e37d35407d436e4a6677eb25664440773e12e5593feaa37575e0bdcfbdf9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191895, "uuid": "fa73661a-eac2-4ed9-b55e-5792a0f9fa52", "value": "T1FDC30956F8819B11D5D151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191895, "uuid": "8a7624cf-3a1e-4838-a238-87017fd57236", "value": "3072:fsD7YhjFMX+maR8TcDeRqQV3tNQYciYTG1U:fsD76aX9aKTcRQVnoiYq1U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191895, "uuid": "7367f5ee-9170-4bdb-a129-6d500640b58c", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191895, "uuid": "b7fe624d-e048-40e5-9aa6-11081f20fee6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60ded28f-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload (MaskGramStealer)", "timestamp": 1770191946, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191946, "uuid": "310f2cbc-c22c-4d7d-bd09-794d9beccf12", "comment": "Malware payload (MaskGramStealer)", "value": "1ffe6e8bdc1983910d12ef9d97f65b55", "object_relation": "md5", "Tag": [ { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191946, "uuid": "e1e5fd38-996a-4fc1-a1a3-3495b7a16a21", "comment": "Malware payload (MaskGramStealer)", "value": "8c702723a25c5278e37cde31bb4ed662eb81a249a1d8b79ade5ac94c955fa3db", "object_relation": "sha256", "Tag": [ { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191946, "uuid": "fc8a8646-9609-401c-8f0d-d44c396f1704", "value": "T1B4230A2BA8E251FDC41AE5758DFB922E6877B8C0107D2A0E19F0DF0B2BB67B0531D2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191946, "uuid": "a5ab6350-99fd-40a1-b586-4e537ce84cf2", "value": "1512861382a06675835d7a1b5c8d98e7", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191946, "uuid": "cd21444b-8d51-4006-83c4-5e8f200327d9", "value": "768:jd/2s+WvVClkHywyied8E9QvMfzvXlhBgFZUSCRcQw8sCdfT:xb+yVgkSwyFd8E9QKXjWFZUw8s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770191946, "uuid": "26b21a82-1dc9-4500-990e-415b5dbbdb0b", "value": 45568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191946, "uuid": "5b4b7328-c999-4243-861e-dc60a913357b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c82c13df-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770192119, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770192119, "uuid": "16ab0c17-1593-4ad4-9f15-31c3b50c479a", "comment": "Malware payload", "value": "896e156e54c8e0eda6ca261bf81c1038", "object_relation": "md5", "Tag": [ { "name": "Cryxos", "colour": "#f8446f", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770192119, "uuid": "30f868c7-d522-4875-a011-ab1388221cd0", "comment": "Malware payload", "value": "4d91fad5bcb036b06412fca225e6d42f7e81f283acde8c43c1817855ad543951", "object_relation": "sha256", "Tag": [ { "name": "Cryxos", "colour": "#f8446f", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770192119, "uuid": "9885b9e7-bf35-4aa8-b813-c87ce3cdd87f", "value": "T124B092DB040046002AF60302CB03332C79A712EB1C18B0110A125940767CB0F8A3AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770192119, "uuid": "f864a34f-05b9-4072-b831-a282b86491d4", "value": "3:wOkADYJGOOaYvFOgGKnqoJLDoOfRNbSBjOOEX+:mmYPOxlGR+LDhgEO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770192119, "uuid": "6ffd0d2e-6b49-43a3-848d-a599f216e805", "value": 112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770192119, "uuid": "c2f82be3-588e-48b6-b3eb-aa90bc6453b1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "86547035-01a5-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Socks5Systemz)", "timestamp": 1770194586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770194586, "uuid": "4a716b45-b2a6-4b63-9ea9-9299d3ee0ddd", "comment": "Malware payload (Socks5Systemz)", "value": "e846bd3b25c92835a644e1cc91adf328", "object_relation": "md5", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770194586, "uuid": "101e1b70-cd07-4bd0-a794-67be538d8f45", "comment": "Malware payload (Socks5Systemz)", "value": "6de90e51937f07fd6650703948585b1a0e692797d4648d927be3cdae0d2d7871", "object_relation": "sha256", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770194586, "uuid": "1245ca0b-616b-487b-848b-12d4d6320a7c", "value": "T121945B217917C032D66292711F79FFF185ADA8259B7109DB7BC00F769E202E26A31F", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770194586, "uuid": "7072d2f8-dcce-48ad-b296-fd96f4466431", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770194586, "uuid": "e481197b-6986-49fa-ba42-cbd511e52660", "value": "6144:O4bMHF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHzsAyuWZGUf/Sdfy9103T7fms4AB:+HF0VKkWrb4QDwR4QWdyzsAlWZBR8qM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770194586, "uuid": "ce9c2087-dda0-4737-9a04-7e3493c03e66", "value": 436736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770194586, "uuid": "68928001-35fd-4ce7-9c48-d2daa8b7db9e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7c591d12-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770195428, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195428, "uuid": "67d418a2-a556-4494-8452-19b14c901311", "comment": "Malware payload", "value": "fd0e1bf22deae02f582a9935644728c7", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195428, "uuid": "f69578eb-1750-44f0-a690-a261a61deee3", "comment": "Malware payload", "value": "36baab7ccccc951336038df2ef6ba1dbe81e5c9a51318779514476f2df3dfd93", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195428, "uuid": "54179ec3-5849-4e5a-86f5-35ebf39c89fe", "value": "T1AD954B3AAD53ADA736DCA3D38F939424ECF4817A5A1311F872E841CE3058D469F989", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195428, "uuid": "e68c2dec-d47f-4920-9d43-bc9d3a3024e5", "value": "12288:WjpFfuizU6hSbanCG0JBab4Lle2/UZ2UGTzo3ff2lQ5FdZ7e2sxP+Mp6n9PQ/mj9:2kiIR5kPEUAKffZRIPrpk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770195428, "uuid": "68446b1f-ad47-444f-94b2-8ed0cc79f0d0", "value": 2035681, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195428, "uuid": "23796511-a23c-496c-b4ab-22e0e2ff7085", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "52237cc9-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770195786, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195786, "uuid": "92cc8a06-2023-40a3-924d-3c55a3ff87a3", "comment": "Malware payload", "value": "472e7020a47515d55576a47874060b7a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195786, "uuid": "419a2c89-b312-4616-8b8c-fc53411f4780", "comment": "Malware payload", "value": "dda3433c02851eb2a9c864ae8a4e58fc7a22ad3982dbfc92938a1d1b651feac5", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195786, "uuid": "36fa45b9-d45c-4c41-ba48-a028761b7af7", "value": "T15562D636C819FCC9277F3EA191243B551C9D282B97AC9E98FEC004A63591329DF358", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195786, "uuid": "2cdec1cc-629c-4688-b6ce-3278e40d2479", "value": "384:DSwEA+ThVc1u7KXxhloPhqh6huYnv7uZncIQLRLRLRLuX:KAmIegtQuYnenoLRLRLRLuX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770195786, "uuid": "a1084c65-571f-4ef7-b798-63e3bf301794", "value": 15951, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195786, "uuid": "e24bc3d4-d4d6-4c42-8d67-e1a28051538c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b23f7ed1-01ab-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770197236, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770197236, "uuid": "46b3add1-75ca-470c-87d7-040664093f0c", "comment": "Malware payload (Mirai)", "value": "ec9410048131c55c8ec245709b5c7b73", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770197236, "uuid": "e4a948a2-2477-452f-9029-b581e53d1a21", "comment": "Malware payload (Mirai)", "value": "ce7b00159203a5815e590552edb7dee65d2d7b26359c757ff2528deb4eec1bca", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770197236, "uuid": "69c1a4ad-81a9-4e1a-b6d3-fb596b0ea8b0", "value": "T15121064A0335F904268A8E2C64592EC19BC583E3F26ACEC5B4651F37D58961C6C4DF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770197236, "uuid": "c79a21d2-6d5b-4d23-861a-c5f40e803415", "value": "24:MHH3AHd0HBW3BjHBJHmNIx3aHAHC3cK7HFHL3EHOHG3zH5Hwk3EHOHA3ZHTHE3t4:MHH3AH6HBW3BjHBJHd3aHAHC3cmHFHLh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770197236, "uuid": "6c8240a7-ddb3-4275-883c-820fcd824a68", "value": 1282, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770197236, "uuid": "b8194f0d-9de7-4e03-89f4-b0f6580685e7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0ff886de-01ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770197823, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770197823, "uuid": "f1200e94-a793-42ee-8494-7da886554536", "comment": "Malware payload (Gafgyt)", "value": "a7bf54067193c966ed6182df0bacab2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770197823, "uuid": "36a347b1-c84d-4009-8058-7e913b42018f", "comment": "Malware payload (Gafgyt)", "value": "3f8b54248ff47e2b3a3bfa0208d855ef10bd4aaa33f83fbdcda42e800afb2e2d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770197823, "uuid": "1aabf0e8-e8cd-49b7-827b-b6bc396936cb", "value": "T1FCF34B09EA904757C1E3277AB6CB434E33238B94A3D733165938ABF43FC27995E269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770197823, "uuid": "ea92b6be-7506-480a-a175-21c71f283c33", "value": "3072:0dH4vMaa6CPod/8GPWTZmhK98yyv6M/9TKAam3wgRIQ5bX:aEMaa6CP4/gTZmA98yySM/9TKPm3wgR9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770197823, "uuid": "d702bfac-3071-40d3-8e7d-b07641d46620", "value": 171561, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770197823, "uuid": "f1dc7ffa-5a71-4027-9d06-832942326975", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e904faf4-01ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770198187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770198187, "uuid": "325548bf-4315-4102-8483-247dfebcd7b7", "comment": "Malware payload", "value": "92127c038d8d6fa05addbbe9dec57eec", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770198187, "uuid": "aaf86b30-3b82-4e1a-b165-f8607840cfb5", "comment": "Malware payload", "value": "902d4928017277d7449bc91bf68e6b018b75195797562486bae76c1afda71ff9", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770198187, "uuid": "a3bde0ba-c640-47df-872e-7d3833b53c84", "value": "T141B422F29C58C2789025F7217575F88359D6C83BF35134D810DADBEBCB6AA024D9BB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770198187, "uuid": "ebdbf946-7a59-4dfc-a01b-c5a1d25d3274", "value": "12288:p8mQypbAR3rW2de10wd7ZTwadFyqYoW8Psk4SI2IV:qmZbA9yp10wd7OadFFbF4xdV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770198187, "uuid": "e9e5c69c-112a-4f9a-a5ec-a60f3116dc1a", "value": 507456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770198187, "uuid": "5e03be8a-3ecf-4918-9696-2779b76ab0a3", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e910676b-01ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770198187, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770198187, "uuid": "580dbc35-86f4-4002-95b9-e5862e672cc2", "comment": "Malware payload", "value": "19a8f8397bd733b17e2633f1f0d5f149", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770198187, "uuid": "8d3689ef-fe32-4941-97b7-ff7b7d21b485", "comment": "Malware payload", "value": "612e41246b085780e2cd93e3f25f98cc78161fca355b1e14e19023936a3d9e26", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770198187, "uuid": "13cc2c43-fb08-48bc-94f4-8b4a22bc935c", "value": "T13664E1F50E7731E8DB74C4C65295E2A71DCBEC7329199F46BFC8484AC468BD120F16", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770198187, "uuid": "f8f8629b-9af0-4c98-a9af-6508d34996ff", "value": "6144:fFuyZhSPDaFYMICbzTp37pTjso2XJTPUtrCxTN:rSPDiYMxxlTjsdXYIh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770198187, "uuid": "b93b5da1-3095-4100-9462-d4c359d1d2cc", "value": 314028, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770198187, "uuid": "134b7369-6137-4a14-af8b-d2e112f770dc", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89edbb66-01b1-11f1-8b2a-82aee05be84a", "comment": "Malware payload (a310Logger)", "timestamp": 1770199746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770199746, "uuid": "887b9ffc-f7c6-4d6a-9bb5-f23520c226ac", "comment": "Malware payload (a310Logger)", "value": "d03ffd19700d94c3dcee40fe7a01c0a2", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770199746, "uuid": "2fa8fd42-5f55-4be5-9023-9ab9dafd8e9f", "comment": "Malware payload (a310Logger)", "value": "f8e8f42d80cd52195bdf246e9bb872aa4edac422651d290734cc18ee8ff1c8e1", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770199746, "uuid": "76f77ee8-83db-4bc5-8c5e-e5c6efd80b05", "value": "T10AF281DEA7C77174072938BB1C6F91A6EA6EAE9564384744E6432C67FC2470CC83F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770199746, "uuid": "1a78a914-1340-4e73-8a8a-24fc79ed8e2b", "value": "768:gIQLbCcaRmce2mkrUfPjCofZ1CVJVU3PvOvmeDWeJsI6:gIQLbCcbfrCofZ1CVfU/vOvme6eo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770199746, "uuid": "5e755ac1-cccb-450e-b9b5-ca2df56d561c", "value": 37113, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770199746, "uuid": "625b7641-1a5d-4e84-93bc-45178a6520cd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71ad0f18-01bd-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770204859, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770204859, "uuid": "029ccaf8-2caf-4c8d-9e86-455c01c7d6ef", "comment": "Malware payload", "value": "6eb2c3ac5c01b2e24064dd00a08d88f6", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770204859, "uuid": "9c6377ef-cc6b-48ec-b477-7ab3714e8cc7", "comment": "Malware payload", "value": "4b431f9db1eafc1ac808ed7714d4caea68dea2bcbc8418dca1029375c5036842", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770204859, "uuid": "86afb468-a36a-49e4-9727-395b8dea9f3a", "value": "T173310A033A255184EB233C71B3081675AF3598883466B3DC980E6CFE3D125BA1BA5E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770204859, "uuid": "f87ff361-1145-46cf-b5da-a1c7b517009f", "value": "48:9WLqEP6H9jjvEgDrflmOzCDeDzuvV1dh0Qj/ld:oPcjjvEg/llzCy+vVdDld", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770204859, "uuid": "19959d93-6951-4c4f-8cd3-f4c65737f9da", "value": 1587, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770204859, "uuid": "855dccce-a969-46e0-bdb1-2734a9f92ee3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a5a22d1-01c2-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770206967, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770206967, "uuid": "4ad925d6-0445-4bd8-a809-2d4e530b7909", "comment": "Malware payload", "value": "a87a6493c338bffae6472a28f843184c", "object_relation": "md5", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770206967, "uuid": "799c12d6-7001-44d3-9843-ec58632038b9", "comment": "Malware payload", "value": "699a51f8b2427e45bbcb07f02ee67944b06bd246963086c2dd81fe5980169506", "object_relation": "sha256", "Tag": [ { "name": "Adware.Generic", "colour": "#A3F5F3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770206967, "uuid": "3405932a-07e3-4bc0-8f11-722b1a5ab04a", "value": "T1C2C63351F2B7057AD1B5AF36E45B44087E1E7C7824EA56FE3EB4C10E19B39EA0CBA5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770206967, "uuid": "483e7e35-85a7-45bf-a7f8-2387a024f299", "value": "48aa5c8931746a9655524f67b25a47ef", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770206967, "uuid": "7f5e25b9-bdea-4308-88da-adab3463f8f0", "value": "196608:9VW3uziOxfHBbdbfKNKqDsKSp0R+rL7stcHbYJaTvnxWEbO2ek:9VmQPhdeNKqD5+g6Y0TMEbnl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770206967, "uuid": "fb728d64-a645-432b-ae4f-6dda0acde28d", "value": 12230232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770206967, "uuid": "4b67c223-f65f-4d4f-a104-956550b2a72b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa75a6a4-01c5-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770208524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208524, "uuid": "41f73ba1-8ca8-48ec-83a1-e99a1e78555b", "comment": "Malware payload", "value": "6bb0e3950b724b44e5b5a219b59a6b84", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208524, "uuid": "163fb787-33bd-42c3-b393-285a39cddcbf", "comment": "Malware payload", "value": "823be65cab6feceaf65f64781ffac42dee6ea7037a9a400da1826553fca56dd1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208524, "uuid": "1ca7752e-6f66-467f-a54b-92292763c32f", "value": "T17534CEE9148088AF504F2E4875DC1E05E3D83F3BEFA60D254C1ECA515DA295BEAD2C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208524, "uuid": "f578badc-751e-4d2a-b272-1ae88df15f3f", "value": "6144:CKjv6kW9psDVPwMdPi1SFdKbC7QDNNNNN/NNNNNNNNNNNNNNNNNNNNNNNNNNNNN/:PbVXOSFP7QDNNNNN/NNNNNNNNNNNNNNN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770208524, "uuid": "6f5e2e67-dbd9-4dd2-98e0-439f3efcb22d", "value": 239696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208524, "uuid": "70b0f965-3c5c-42dd-a6f3-b024de00a96d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02a8b4e7-01c6-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770208538, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208538, "uuid": "9e154d96-180e-4de5-8234-c9985b6ce7db", "comment": "Malware payload", "value": "2b1b1559befaafd631186a7c602b4873", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208538, "uuid": "25e9ec42-831f-40a0-93f1-1730cb939757", "comment": "Malware payload", "value": "7775d8411c836f15e525320a984c90941127e7101ded1af8bb5b1234d50ebaf5", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208538, "uuid": "84441089-4386-4063-98be-65d975c04816", "value": "T10506E013EB49CAA7D8BA83F06B774CA92E174F54C652AADB1410767E2E731C10DC1A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208538, "uuid": "37bfdec6-b810-447e-99c9-3f45521875af", "value": "98304:5Zz59+J056EvMRvn87MgmzxzBfTM0tRZEI:5d5EJ05JvMRk7Mfz/fn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770208538, "uuid": "808caa19-aebb-4640-8c51-1b159465d201", "value": 3957089, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208538, "uuid": "ebea3ef1-e67d-4ea1-a33b-54d4ef736817", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7d0c6a1e-01c6-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770208743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208743, "uuid": "13576cb6-baaa-4455-a83b-76b8313cf0c6", "comment": "Malware payload", "value": "5eb2e2c9e4763e1414ee9e07b0b28440", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208743, "uuid": "d018fa7a-8c9e-4227-bbf0-69503e9e983b", "comment": "Malware payload", "value": "b73fa0c27fb1289795c86f2a8b37c5f85fc59d94768a706246190a885f1c0217", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208743, "uuid": "6023be03-5a69-473c-a45e-658e251427a7", "value": "T164A5F11CDA126E33D927B1BD60A35E5AE715A08311DC9D9364C2D9388BDFA143F321", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208743, "uuid": "5921666f-658d-43c0-9f68-2a8a659ad874", "value": "49152:T2clyIW0r0Go/ThbtDG9jL9rMxGr8IlBouc6I6:CoqltDYtA2dVc6I6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770208743, "uuid": "3e683cb3-aa8c-4684-893d-301b7118d48b", "value": 2143310, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208743, "uuid": "cc144b71-b168-42a3-9095-e76ba70f8df0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b619767c-01c7-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770209269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209269, "uuid": "7a6ea798-fd74-41e2-a53f-cb71f61fdf2a", "comment": "Malware payload (Mirai)", "value": "807d8dc9b0a9eb163341b7df823bfdd6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209269, "uuid": "c6171b0c-d65c-4e91-80bf-8406f50e975a", "comment": "Malware payload (Mirai)", "value": "65370cee8d5e697614273fe3f5458fe3f897968d883106306d39cceb61706029", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209269, "uuid": "c53ec43d-6468-46df-9212-814da52aa46b", "value": "T1B4C34B46EB818B03C4D51776BA9F424A3323EB54E3DB330699185FB43F867AE0E675", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209269, "uuid": "bf9565c5-d01b-4aad-b1f7-abe2823ec47d", "value": "3072:pZbrJ6ah3P0srIGjE5L6wnezW1kxM/9DlJj:pZbMah3frIGjE5+wkW1qM/9D7j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770209269, "uuid": "47f67bd4-ffb4-41e5-80c0-86cf3abfe929", "value": 128282, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209269, "uuid": "81f9c34e-0c9a-4f1e-b025-3a569e88f04e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0f8f30df-fdcf-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770209648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209648, "uuid": "29df12ed-87cf-4db5-b7b2-c4f8813184ef", "comment": "Malware payload", "value": "c889498442f702b0a9273303635649fa", "object_relation": "md5", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209648, "uuid": "7caa0923-fd5f-4cc2-99be-72a15a143034", "comment": "Malware payload", "value": "3ccd84c6fad4189bd2b127e6eddbb6a8b7a0dcf8dd5cca203003983d34cbf81c", "object_relation": "sha256", "Tag": [ { "name": "msi-stego", "colour": "#9a67cc", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "stego", "colour": "#38259d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209648, "uuid": "3aa82b9e-4d65-4a3b-968b-c75b704b12d7", "value": "T158E58D728203FEDA576A8DACC45039006C89A4679B1651A8BECC13CEF19F598DEFCC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209648, "uuid": "fd8c32cc-8971-44f3-aeef-33c1d1167a8b", "value": "49152:8UixbItdTrJoFVPMvXGzOUzm3727E43cnF7h:7iBI/JoFdMPGQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770209648, "uuid": "875ddcb6-ce01-438e-b931-890c182ae559", "value": 3203932, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209648, "uuid": "45c96ede-d899-45af-8a6c-d40d7f750cca", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9953aa7f-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770209650, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209650, "uuid": "3aa00a7d-0966-42ef-8112-f71cf247257e", "comment": "Malware payload", "value": "884bab9fe6a1c95a985c159e0a2e1f21", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209650, "uuid": "bc972b0c-3c41-44f7-9480-fe5eaf326278", "comment": "Malware payload", "value": "c15ea1bbf6fa09969b7d3917aaf0ca17aa89978861be19f78d309cf67c0787cd", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209650, "uuid": "b51e4f5e-9b5d-4f28-ae6f-e91de30b744c", "value": "T173E4AFF65395EC8F0A1C0E95F508074A1C6C48D7E5B8C2B47A82B8F9869A1A44FFCD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209650, "uuid": "e57b4e5b-37a0-484d-adb5-9655d9ec084c", "value": "12288:+8Vh8P5yyBqrjjZ0W2s4oO9ZYg3UtSwImcyjaJ+hE7TqvIwK:+gu/BqrjN/2ZoOH3UtSwImcyjaJ+h+T7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770209650, "uuid": "2910b27a-4d52-423d-8296-6cde606c079f", "value": 676527, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209650, "uuid": "c0868c91-db45-4df7-90dc-67ec2a8a413b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9d4d8d61-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770209656, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209656, "uuid": "a565673e-b0f6-4aeb-94cf-8ebef56951fb", "comment": "Malware payload", "value": "032009f68587243b9484a67f6a3173d2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209656, "uuid": "4306fddd-791b-4814-ac2e-ff790a9ea2fa", "comment": "Malware payload", "value": "a3890c2b3ed6ab5a990f3eca3c8f6924d4c06a192c4b4e0cd1df8f9d48151ccc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209656, "uuid": "a96cb3f2-80ea-4c3b-916e-585e061b2bb1", "value": "T10BF31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209656, "uuid": "fddab027-37ec-4164-8cb5-8ba48015b586", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0V:aru8GPLMWLasdlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770209656, "uuid": "29ff7d02-3376-4bf5-b4b8-51557bc867d7", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209656, "uuid": "317fa660-b377-405d-a77f-daec8f5d438b", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74765bf3-01c9-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770210017, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210017, "uuid": "03d799e3-98a2-4570-b05f-3dcf8b34575e", "comment": "Malware payload", "value": "9ca55d3ea609a4f5d6f4a167bbac406e", "object_relation": "md5", "Tag": [ { "name": "SilentStealer", "colour": "#4bc0e5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210017, "uuid": "a3ddaaf0-82c0-4076-8b5b-3ffe4ae2e782", "comment": "Malware payload", "value": "cc833d8c6c2f994d1a4819a459f44d1d7a10c0488e02d548c596d7bc77b3a6ad", "object_relation": "sha256", "Tag": [ { "name": "SilentStealer", "colour": "#4bc0e5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770210017, "uuid": "5aac389f-d438-4440-b9c7-b09856dbbde1", "value": "T15B0833018356F1B0DBDD617F105A2826EB3DF68070AFA7112F7902EE55F8F5B60AE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770210017, "uuid": "07c680c2-92c8-4aac-9ae1-c6b1df425a65", "value": "1572864:hNFaueIKZiNGlFQqqvyRoe0NSVyntmFCeWQhSITnGw/YMEB:zFaukDIqEpeMawqC3Qcw/c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770210017, "uuid": "054b31d4-3f12-458d-b19a-c978bfd542da", "value": 80447664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770210017, "uuid": "fc5efec7-65a6-4808-be32-409284905025", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ded180a8-01cc-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770211484, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770211484, "uuid": "44bf7cbe-7572-42b0-830c-cece4bcc77d9", "comment": "Malware payload (Mirai)", "value": "1a356e52fd5086a3a4938274f07a5033", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770211484, "uuid": "af7dd553-d427-4a55-bd45-8d2b5a3a5f3f", "comment": "Malware payload (Mirai)", "value": "f7665c5e895a5bfb622f5a5e4e604d55cdb899e723746f93285acd8d4fbd22e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770211484, "uuid": "53e8817e-1999-4562-8287-8c596a167987", "value": "T1C7330985BC929A02C9C41376F62E11CD372663E8E1DF32079E226F1177CAD2F0E676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770211484, "uuid": "9f4dc74d-5caf-4552-b056-a8cc03c72090", "value": "768:jA46Ihj9eRNKqSASQ83EzTMzSpeT3QoODOHL9BNOJ8504zm60N/:J6Ihxy4qSASQgpzSYT3d+Yx0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770211484, "uuid": "77c8388f-fc6b-4cfe-a065-ce0e0286bc08", "value": 54832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770211484, "uuid": "6d96c97e-452c-4940-b10e-60b127b65e1b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d003e745-01ce-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770212319, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770212319, "uuid": "b1172471-1348-4621-98b6-de408740a013", "comment": "Malware payload", "value": "2361962bd778cf315066d031c4259de1", "object_relation": "md5", "Tag": [ { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770212319, "uuid": "77a8e4a7-2bac-4f29-a2c2-a8b00a7a2ad6", "comment": "Malware payload", "value": "893430cad5084bff8abd67e003a0bc1cc43f7bffc19044d741344ca8d5ab7df1", "object_relation": "sha256", "Tag": [ { "name": "Adware.InstallCore", "colour": "#51c189", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770212319, "uuid": "1bbbab47-46de-4e93-81fb-ca476215e44c", "value": "T1228633814B978C77C7848779AD6D02192F667FCA3A39124DF128B1CD1F736D8A81A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770212319, "uuid": "ff998b35-85bb-4a10-913c-281398b62a61", "value": "2fb819a19fe4dee5c03e8c6a79342f79", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770212319, "uuid": "85fbf4be-72fd-40ec-a4e0-ff10a7b3ea43", "value": "196608:CYsZkG8hPWdI3qaZp8gFwPRBle3HR435dczukqT6DAtBAGbf+qPYN:CYsN8dW23sPIRm5iHZyB5YN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770212319, "uuid": "b1ef97e7-73db-4971-9793-8590d29cb892", "value": 8084612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770212319, "uuid": "4d9f22e4-cf49-4884-b4d7-06d89d7d1974", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a177160d-01da-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770217394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770217394, "uuid": "39f0e1cb-60a9-4ded-9047-363c32ecc133", "comment": "Malware payload (Mirai)", "value": "6495b0759cc58a2a3cd9657733d6f1e6", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770217394, "uuid": "efffac11-f192-427f-8ede-abe387bfd429", "comment": "Malware payload (Mirai)", "value": "f7f35a281d6449ba8a75f3cd4ad61196d0e99c5b7e1d1e39d045a65aaae3fdb8", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770217394, "uuid": "b1b495fc-7a99-4b8c-a310-80e8531c04d3", "value": "T12A935BC1A693D4F5E81610701537A73B8A35D47A2275FF83FBA4EE76AC92B40C5063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770217394, "uuid": "bb0f1ed4-7141-4862-a1bf-a4ab2732ab05", "value": "1536:Cl7XIANcoKinFObL5q8/YlKy2yOw7CRasK6C31A+nQAZxOFWDpeBDZH/ECEJ:CXNcoKink5PwlKO78aOCFAnAsWF0DsJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770217394, "uuid": "75da2724-e1b9-486c-8d55-3336fd63128a", "value": 96244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770217394, "uuid": "92bbe18b-b381-40c0-8962-3515954b1af7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a180fce7-01da-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770217394, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770217394, "uuid": "200fe0af-9fdb-4df5-9f00-d655e306b5b4", "comment": "Malware payload (Mirai)", "value": "cdc5feaaa0b31e71e899839cbac0567a", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770217394, "uuid": "4e5e3eba-3a3b-442d-99dd-4f1796225325", "comment": "Malware payload (Mirai)", "value": "68b6bbafc9a770abc00dfb0075e0a0a6a956896de2f36ea8b21b99529ee7eb84", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770217394, "uuid": "e7da5c66-cf17-45d8-80b9-0e7c200bd54c", "value": "T115E3D70F6E25CF6DF3A9C33847B38E31A35923C626E1C645E17CE6112E6028D581FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770217394, "uuid": "92f598b5-1673-4493-a226-368c5bb0a92f", "value": "1536:0mcsD7T4yT28sv8jYlpZSDsW2BZO/Gq08z8l5EGlsA5lcEBaGWneWyuaAb1M:0mVDoyK7TSDsW2BgtO9sA5lnaGPAb1M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770217394, "uuid": "052d3673-adfc-46cb-83c6-2081ca83e07a", "value": 143828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770217394, "uuid": "7a2041e0-1385-4b6c-92f0-8bbc471ffd41", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20ad34f4-01dd-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Vidar)", "timestamp": 1770218467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770218467, "uuid": "52b3601d-aea8-4f46-8f68-1a3442372a28", "comment": "Malware payload (Vidar)", "value": "8f1b3237272e9fc6852b1118448996bd", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770218467, "uuid": "74441cde-68e9-4b6e-a929-6d11feba9e28", "comment": "Malware payload (Vidar)", "value": "6dff75cc517d32b2a2313680192314e9bab38ab1be41e1d76a10c9a420d7167c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770218467, "uuid": "066ab7ca-7eed-4af1-8a12-8688ca193e28", "value": "T10825121789D9F5DEE10182799061E3B5A824BCA593C80E3A8BF2C8395F725DCECF79", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770218467, "uuid": "0bfb7be5-973c-42d0-9363-e3b12e6ff68d", "value": "79d835308ce55e88c91797546b6ac4c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770218467, "uuid": "88f96af6-e946-4b6a-a5f5-c3c2792fafef", "value": "24576:j9uh8rvGJ8dqlHFFEzRu18hKWttIaWKUIun00cAQBi:j9uhIvGsiFFEgkKWt1qIu0bX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770218467, "uuid": "a18c0a4f-1590-473d-a618-4562bf22fe8b", "value": 987136, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770218467, "uuid": "04091ab4-47fd-4c18-a7af-48f6a5e5fa7c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1bff478-01df-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770219677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219677, "uuid": "0cd1d5cb-a8c4-466c-8e5e-5b5d11d459ea", "comment": "Malware payload", "value": "3ff0e2a7e28cd996843db44f7ff99329", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219677, "uuid": "86c80acc-c436-4e04-83ac-392191a8fceb", "comment": "Malware payload", "value": "3221288baf84b85cb6f65e2afac4d81bb82e144258e338fec03f2b508d671a02", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770219677, "uuid": "5d5bcc45-8afc-4d69-b3ee-ccd038f20c18", "value": "T1D975229239D8C036D3AE153389BA9B70362EBC751B34D4CF67A4796C99313D2B9393", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770219677, "uuid": "be1e6fdf-1f31-46ae-b626-f0d887d11537", "value": "49152:UpxxoKyitSpxpjg/0OKSGuPnC470Dkuqx:UpjyaSpXjg/hGmnHua", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770219677, "uuid": "5fe10609-d012-4fa5-989d-9be52dc1a4bc", "value": 1646592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770219677, "uuid": "06680678-d540-4fd0-8485-b2101da04ad1", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa3068d1-01e3-11f1-8b2a-82aee05be84a", "comment": "Malware payload (SalatStealer)", "timestamp": 1770221409, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770221409, "uuid": "9979bdbc-1eca-47f4-a21c-140446005b14", "comment": "Malware payload (SalatStealer)", "value": "6daacb2312d70a659ab12de5e1b5147d", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770221409, "uuid": "1b12a27f-5327-4e73-8748-cadf9f693acb", "comment": "Malware payload (SalatStealer)", "value": "7453d6726b4bf1bae783e1f710c347b92c23f53d97c4db1b3312345e0bdb07b7", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770221409, "uuid": "a541ba0e-6bff-4684-a589-3ef29531de6e", "value": "T16FE53315293EA054C0522E39F974FC36FA2A7C78D3870A7A0D0D5025A2A63E6F8DD5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770221409, "uuid": "48bf4d28-f1c9-489b-bf59-16367f11a58b", "value": "6ed4f5f04d62b18d96b26d6db7c18840", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770221409, "uuid": "9c984028-6879-4ccd-85d8-7dd2d2fd74ba", "value": "49152:j4BCmmTqRaFyj9cnoBDq/MOon2TgE1ZU8MrycA3beqsD8lbPAtqM8F:j4BCmHRaDnWDqXU6g0U84A3qh8lXM8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770221409, "uuid": "fab880e1-fb46-4b7f-bc91-aa4bdc703b2b", "value": 3298304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770221409, "uuid": "6ca12d4a-ede1-4eb8-9236-3fe14d3ac47c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f7d2590b-01ed-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770228448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770228448, "uuid": "b528113a-d987-4d6e-bd0a-ee2b89821cb1", "comment": "Malware payload", "value": "a764f32b3a29e47926e39566dcfbff58", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770228448, "uuid": "ac0ce847-6f8c-4b5a-b897-c9a9a575baab", "comment": "Malware payload", "value": "f6a46c4ca04588f73f61e1e7cca336f3f97138a1557ef9ec3c345068c630704a", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770228448, "uuid": "3f4f894c-4159-4078-b7e4-a6090d8ba8be", "value": "T13B31E7124D79DB4DCB3ABB3116D212E1971360F2830CC7934BA83E8127A1AD15E467", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770228448, "uuid": "d911e26c-5eda-4b7f-a7c2-ea73c1fe1e61", "value": "48:9qIR7AeHKT5lr1PxWzBu55SBU1Uq1C1SlpbI:EIhAeH0vpQ85UBYJ+UhI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770228448, "uuid": "7507c66a-bb1b-4c82-a118-df45d34ae0be", "value": 1586, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770228448, "uuid": "c6e1d730-fb45-4d43-a33b-d58eb50dc2a0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6183e94d-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770231815, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770231815, "uuid": "d3363f25-5e60-4eb0-97e5-4bddd57551b6", "comment": "Malware payload", "value": "dbc520ea1518748fec9fcfcf29755c30", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770231815, "uuid": "9649ee9b-6229-4918-8233-913f5b22d2a2", "comment": "Malware payload", "value": "c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770231815, "uuid": "a0be4cc7-ebe7-44c8-853b-f0aed8c1c954", "value": "D2D3128AA536ED54F11B9AF11B3B99907DF5659E82F4D4A4A2CF634312CC343FA4070B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770231815, "uuid": "65ffaad5-62d7-41cc-bace-78b4d0309a63", "value": "3072:Nc4i0agsmw3Py5CP5HM8EVLUuYtgB5H6oz:Nc/0aNPy54EVAhOae", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770231815, "uuid": "851ab5a7-7527-4cdf-8748-f23e5d5a413c", "value": 132860, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "598c1025-0206-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770236172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236172, "uuid": "4d084043-6dc4-4a2c-b284-a04be4a7007d", "comment": "Malware payload (Mirai)", "value": "837ed6ade745b06f2c6f29a288486dbb", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236172, "uuid": "1f180c5c-d9fc-4d4e-8b68-29bd9505e456", "comment": "Malware payload (Mirai)", "value": "73ce52a64c4ebc59ffd7e109fb3f30f2f3f939df009fb6e5e0b7e4e11f59ceb8", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236172, "uuid": "ac8ef252-4edc-40ed-89dc-954457a0d02b", "value": "T12CA30B46B9528A12C5C212BEFBAF418D33136F78D3EE7212DD206F5423869EB0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236172, "uuid": "4fefa266-c7dc-4cea-b00b-6e07930f06c0", "value": "3072:IRATW47dybRqV6pO9ncfGU7C88z1A9sqDnaetwRfSSt4COEB+Za:ISTW47dzplceU7C5z16sqTaZRUCLQZa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770236172, "uuid": "17c3f69a-fa9c-44d4-bd81-95049335c849", "value": 103876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236172, "uuid": "aebde65d-0001-4fab-a026-95a2fad1fe42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "59f5268f-0206-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770236172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236172, "uuid": "ff495856-ab42-4331-88f4-2e80f30dcb80", "comment": "Malware payload (Mirai)", "value": "968d03c467429a65a3bb269f0ab9eda2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236172, "uuid": "81b2add5-2032-49fb-b495-f268960561ee", "comment": "Malware payload (Mirai)", "value": "b4c8d56dd8df6fd8484935c40dde393bfc1fc2f59bc4d9cee2439fcb1fda7b06", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236172, "uuid": "2e945862-4112-4617-b396-5c50fc4d5b87", "value": "T1FC933A45F353E5F1D84705F002ABE73A5A31FD331220D96BDBA4FFE2AD215C2A0962", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236172, "uuid": "d45d6865-5ae5-4a03-a522-3c7bdfec79cf", "value": "1536:6slfLU0HVfxJa2sARiH3+gptUS3100x7V/ow0ew6czHcrI:D3pxo23RiHT6kC4wZb0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770236172, "uuid": "3708908e-30d5-456e-9733-c0a6e4b4ff3d", "value": 94608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236172, "uuid": "6642403a-0ee1-42e2-bd0e-90bea8fa3bd5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b8ef867-0206-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770236229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "81cf4330-b98e-467f-ab01-9568f0fd4e57", "comment": "Malware payload (Mirai)", "value": "7f98b236884b337e91147ea1457487fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "87128a7a-6603-4a4d-9eff-d126ebed2feb", "comment": "Malware payload (Mirai)", "value": "9fb4d12628f3c416e0cee61b1718a1f9e92700b362175a1c83873c623d49f72e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236229, "uuid": "4bd7577c-de2c-40f0-8439-c2575f5d5942", "value": "T15B835A23EA179F46D14365F0A1F28E754F22FC198D2B2EF664A1EDE48143EE8B5053", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236229, "uuid": "ccafebe9-2a63-4dbe-abb6-882e584315b4", "value": "1536:Ybwt5UJeF9LdR03VijsGJTEiSxWEDHKrXBV7WAE/98C1cnn5fN:YbBerLdRAhUmqrbvE/98Tn51", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770236229, "uuid": "793f5bf2-ba9c-474e-bb5f-f467ed9ba5bd", "value": 83432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236229, "uuid": "c169c51e-1d1d-468f-abc5-77780564f460", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b945f26-0206-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770236229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "619fc45c-1079-4ccc-b5d1-8236b72f57d8", "comment": "Malware payload", "value": "bccfa922d8fe362941f15bf396c3f72c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "6694add0-0162-4d1c-ade4-5eba0c6e2177", "comment": "Malware payload", "value": "3aadfa985191f3a6613f2ba62f97237630075bf6a2235033c351597257abcf07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236229, "uuid": "f23134a3-a00f-46c4-9639-bce88982bd2e", "value": "T1DAA30897B901CE7FF80BD6BA44E309197520FB660A530B76A367FDD3AD710D41922E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236229, "uuid": "ced1d3ca-4a01-4754-ac00-6117d1bbaf93", "value": "1536:KvjYRRhyBJWrYfmppHT/KhA8Fd4J8u0EjHHiqYzLbp2vtryj+uSw:KvkzYIYfmppz/Khl46EGfatryjrSw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770236229, "uuid": "0ad61f58-adcb-404f-b269-ca45ee5e78cf", "value": 103504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770236229, "uuid": "a3e2b4bb-1429-40f4-be09-7a425c11093c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7b9157cd-0206-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770242649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "81dccf6c-e731-47ab-88bd-856e13f90f29", "comment": "Malware payload (Mirai)", "value": "357409d61f3747764ff8432c9922515c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "27dc2be3-e368-4f93-af86-249d0d5c9481", "comment": "Malware payload (Mirai)", "value": "647e892c883f08878fa28bda2a5d0ba3636ffe4058196de3ad0d5c5428561b7d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242649, "uuid": "6313845c-40e8-4c1f-acce-93abf714e3bc", "value": "T12F93190377090F43D06329F0267B1BF097EABDA129F5B684751EBEC59271DB22182F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242649, "uuid": "799e0333-ec3d-4590-8222-7e3913f25ea6", "value": "1536:0L+U/Kk3X0NQHCOoDTZl4Wc10HeaauDq0eemJ6BX2pYXLIspMJ:0j3bdoJqAyamXwuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770242649, "uuid": "999fa7ca-f440-4fe6-8209-f98a62a74dc4", "value": 92840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242649, "uuid": "72935776-20b2-4059-afd2-a4c6423d99b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e775daf-0215-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770242649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "303f0a36-1c6c-406f-a845-262bc44dd02d", "comment": "Malware payload (Mirai)", "value": "957defdfae4a18680dc72a6abe02c9b6", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "80ad4132-9cda-4557-96c2-f5a622a1956b", "comment": "Malware payload (Mirai)", "value": "97b405aea4b97abe1b581025018eefee43cd388e57019735b424ac68b3ab1e04", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242649, "uuid": "306640ae-af44-44f4-a53c-eb5966eb6cb8", "value": "T199B30946A9429F11D5C631FAFBAE418933136FB8E3FA7101D9206F5423C69DB0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242649, "uuid": "e3b59886-314f-4b02-9a93-90330d0d1955", "value": "3072:0qxvPnNM5NYqVzpOJn4fGthvNOiLd8tQa/F7h1eTlKzyf53I04+b7Bz:VxvPnNMBmZ4ethvNOiR6Qa/F7h14Kzy9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770242649, "uuid": "e938e43f-1525-4ab6-bbd9-951aa5721c0c", "value": 117220, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242649, "uuid": "ed3d0c6f-c21e-4eb8-b4ba-f0dc9be48f23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e7b0ab8-0215-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770242649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "548b7509-2810-4b5f-8278-0991a60d5021", "comment": "Malware payload (Mirai)", "value": "beee2d924f01f359938557846d564f82", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "3758c93b-da03-477f-99b8-80ddcca59939", "comment": "Malware payload (Mirai)", "value": "d770443c789ec969c045db3a6d5a1115881278841c4c0f0d421fa7c49fa1bd1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242649, "uuid": "7defd345-7896-4298-a012-c40ee56345a8", "value": "T1B47318C6AA43DEF3E91711F502B7A7365A32FD3A0836D5C7E364FCA2A9115C0A1163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242649, "uuid": "d7fbd701-f847-44ad-89ef-02b730697f27", "value": "1536:FowF2OejfwG8CT2pUkOpS3TlpuqXfjZm53JaK9J/yCD4G6i9LVd:FowwTrwG8CTTkNTlRflm53EK9JKe4m1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770242649, "uuid": "231607c2-1ad6-4c2d-84be-099219da42fb", "value": 79244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242649, "uuid": "2d3a0064-920a-41e7-aa74-12e7ece3c7a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b48577fa-0215-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770242767, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242767, "uuid": "61fac870-4021-4227-bfff-13843b3053f0", "comment": "Malware payload (Gafgyt)", "value": "42c957e9bb58adcd961ee03bb1d7f115", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242767, "uuid": "b8200b08-8a1a-4b22-8bd1-7e3ce489d367", "comment": "Malware payload (Gafgyt)", "value": "714679fe2be826f5b8abd867c1ad5e77fda1a83833b056ac2bee419f3ffb6ac2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242767, "uuid": "ba8db248-feba-4c1e-ba1f-93241aa71659", "value": "T1D2732B077A428BAFC04BC1F807E7793E9922BD7E0A3AA1F5A7E4FD825D05CD05A1D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242767, "uuid": "8c64b899-9305-4b46-bd20-533302edafd7", "value": "1536:p59Qjsjbujf7LUmBr0SR121Ql+d5T2muIE7F/bk9nhMU/K:BQjsjbufLTBrf12fdt8IE7FQ9hMgK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770242767, "uuid": "f701f2b0-2116-485b-ba68-5279a5637b5a", "value": 73664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242767, "uuid": "2a6e3724-ab8e-4120-9fd5-160b89e793d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163457, "uuid": "0c23eb04-015d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.77.140:36475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163639, "uuid": "78fde7cd-015d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.227.165:42767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163754, "uuid": "bd521813-015d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.53.111:53540/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770163928, "uuid": "24cfd060-015e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.230.171:39161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164136, "uuid": "a1239059-015e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.57.67.51:64237/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770164717, "uuid": "fb52169f-015f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.128.110:41339/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770165022, "uuid": "b11bb973-0160-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.208.62:42590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166385, "uuid": "dd842f7e-0163-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/stp26det/22/get", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770166762, "uuid": "be40f691-0164-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.101.243:47301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167060, "uuid": "6ff7b461-0165-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.44.14:35454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167177, "uuid": "b5c5e941-0165-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.6.47:44902/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167662, "uuid": "d6a17330-0166-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:48754/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "1df581b3-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.6.47:44902/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "1e33bd84-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "1e353941-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "1e37a2ac-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "1e38aa08-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167782, "uuid": "1e43ed4f-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167784, "uuid": "1f46f65a-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167830, "uuid": "3af7a69e-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167830, "uuid": "3af7c40c-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167830, "uuid": "3af83f69-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167839, "uuid": "4019782a-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167839, "uuid": "402064cd-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167898, "uuid": "6327af6a-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770167955, "uuid": "850e7be7-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.221.157.235/bins/sora.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770168022, "uuid": "ad13fe01-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.232.2:59307/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770168141, "uuid": "f420fa29-0167-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.101.243:47301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770168261, "uuid": "3bc6db40-0168-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.171:45149/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770168989, "uuid": "ed7c674b-0169-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.249.73:39443/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770170781, "uuid": "19b4119e-016e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.15.132:45300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770171080, "uuid": "cbcb957f-016e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.101.124:46042/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770171439, "uuid": "a2093522-016f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.241.92:48244/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770171555, "uuid": "e7298484-016f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:33262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770171555, "uuid": "e72aee65-016f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.249.73:39443/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770171674, "uuid": "2dcd0841-0170-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.45.140:38495/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770171979, "uuid": "e40e0ab9-0170-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.146.10:35924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770172157, "uuid": "4db6837c-0171-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.34.30:47351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770172266, "uuid": "8f0f486d-0171-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.147.138:50812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770172339, "uuid": "ba615ae1-0171-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.241.92:48244/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770173290, "uuid": "f16daa46-0173-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.15.132:45300/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770173477, "uuid": "60ddfbb5-0174-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.146.10:35924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770173717, "uuid": "ef7c7a57-0174-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.34.109.121:33262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174081, "uuid": "c8d14108-0175-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.232.2:59307/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174082, "uuid": "c91b0fd2-0175-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.164:46593/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174082, "uuid": "c947521e-0175-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.174:53494/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174082, "uuid": "c94c4319-0175-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.172.27:40686/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174095, "uuid": "d10fee7a-0175-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.202.214.128:42107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174137, "uuid": "ea00eb4d-0175-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.190.124:34668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174137, "uuid": "ea520703-0175-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.183.133.219:33671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174137, "uuid": "ea5d7e9e-0175-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.183.133.219:33671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174196, "uuid": "0d5ec527-0176-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.100.210:46333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174197, "uuid": "0dcb2dd5-0176-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.229.156:55172/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174256, "uuid": "30e8a7f9-0176-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:38469/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770174427, "uuid": "9703c8b0-0176-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.236.186.165:42182/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175337, "uuid": "b578cd35-0178-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.8.198:41844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175570, "uuid": "3ffadb27-0179-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.134.250:60512/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175571, "uuid": "40f958e6-0179-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.81.164:57095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175876, "uuid": "f6805b08-0179-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.114.167:53840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175928, "uuid": "158491e3-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/xtyapqu2yv?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175928, "uuid": "159c236e-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/935a6tgsj9?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "17cc3362-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/77rso28d1l?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "17cc3e5f-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/er42vbydn9?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "17cc5fdd-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/fm8908dmt1?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "17ce792c-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/ze179avr3e?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "17d28a94-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/e363z1cj4u?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "17d55df3-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/hmdbi4vltt?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "17d65015-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/1fxb7fzt5r?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770175932, "uuid": "17db3cac-017a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.124/57boggizej4k/assets/js/yo9cc3oi35?token=0bLSZBLT96UHw9czOXWXc0Zt9900L6mU", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770176657, "uuid": "c7e93870-017b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.235.112:50033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770176828, "uuid": "2df94cbe-017c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.14.15.117:45975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770176898, "uuid": "579df5ae-017c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.34.30:47351/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770177312, "uuid": "4e7e1bf3-017d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.59.239.87:42065/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770177376, "uuid": "747f3b67-017d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.81.164:57095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770177732, "uuid": "48959e68-017e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.103.139:33238/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770178476, "uuid": "0445baf8-0180-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.141.21:60168/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770179120, "uuid": "840da7b6-0181-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.103.0.102:54322/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770179476, "uuid": "58a2c817-0182-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.103.139:33238/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770179482, "uuid": "5c2236d5-0182-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.39.253:60283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770180019, "uuid": "9c2e6411-0183-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.141.21:60168/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770180139, "uuid": "e3a78238-0183-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.127.102:33488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770180197, "uuid": "05fda86b-0184-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.49.137:51571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770180370, "uuid": "6d1c8f6b-0184-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.104.189:54104/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770180798, "uuid": "6c09a831-0185-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.39.253:60283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770180798, "uuid": "6c40a944-0185-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.58.237:41655/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770181038, "uuid": "fb953c92-0185-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.169.91:46812/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770181273, "uuid": "8799f796-0186-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.104.189:54104/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770181342, "uuid": "b09afb99-0186-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.169.91:46812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770181759, "uuid": "a8d915dc-0187-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.56.156:38449/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770182118, "uuid": "7ed52a17-0188-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.191.153:51441/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770182710, "uuid": "dff992aa-0189-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.210.66.69:55335/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770182777, "uuid": "07fa4440-018a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.196.72:53027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770183189, "uuid": "fd3b78d3-018a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.101:49640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770183257, "uuid": "25f8694e-018b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.214.243:42502/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770183432, "uuid": "8e8c4916-018b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.6.163:37781/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770183850, "uuid": "872b92cf-018c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.210.66.69:55335/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770183978, "uuid": "d3b527e5-018c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.229.191.153:51441/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770184242, "uuid": "70f0a9ac-018d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.76.82:48034/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770184277, "uuid": "85b6c83d-018d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.122.239.88:48334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770184404, "uuid": "d1cc1bad-018d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.214.243:42502/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770185298, "uuid": "e6c82510-018f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.64.105:57796/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770186554, "uuid": "d338dbfb-0192-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:49905/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187278, "uuid": "82b7220e-0194-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.197.95:54451/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187461, "uuid": "ef9b8113-0194-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:59647/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187462, "uuid": "f0565d93-0194-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.170.191:37100/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187757, "uuid": "a03355d2-0195-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.6.163:37781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187818, "uuid": "c4beca24-0195-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.8:40064/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187869, "uuid": "e2be936a-0195-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.73.14:50130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187938, "uuid": "0bd660b5-0196-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.21:38469/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187998, "uuid": "2fe4e7c2-0196-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.15.157:37522/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770187999, "uuid": "30696a04-0196-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.178:59975/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770188003, "uuid": "32f8195f-0196-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.227.108:33163/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770188060, "uuid": "54fe29c0-0196-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.29.213:56401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770188174, "uuid": "98b01a47-0196-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.162:49905/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770188537, "uuid": "70fb1496-0197-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.69.222:42575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770188776, "uuid": "ff50ce69-0197-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.251.8:40064/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770188899, "uuid": "48a92fec-0198-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.197.95:54451/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189070, "uuid": "ae96e218-0198-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.170.191:37100/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189252, "uuid": "1b68ceed-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "23283dfa-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "2328d2b7-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "2331feaa-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "2332d2a5-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "2337124f-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "233d6da6-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "233d7109-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189265, "uuid": "234444a8-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189321, "uuid": "44755fa4-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189321, "uuid": "4475a3ca-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189377, "uuid": "65dfcb6f-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.227.108:33163/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189380, "uuid": "67cbcf7b-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/bins/nullnet_load.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189443, "uuid": "8d4b643f-0199-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.59.178:59975/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770189803, "uuid": "63d684d0-019a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.63.185.32:57388/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190460, "uuid": "eb638961-019b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.159.176.231:59060/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190507, "uuid": "074d5f02-019c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/cat.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770190829, "uuid": "c74d7966-019c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.128.150.171/cleanfda/init.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191238, "uuid": "bb1d4bfc-019d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.115.190:59084/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191589, "uuid": "8c7b0a8b-019e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://104.223.84.17/", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191765, "uuid": "f556734c-019e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/keys53/c10ud/nmbr9", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191772, "uuid": "f95d72a7-019e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://panychurasc0.com/ORIGINAL/chrome_144.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191779, "uuid": "fdb72f30-019e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://1.181.224.7:49926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191829, "uuid": "1b8fe54d-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191829, "uuid": "1b93fe31-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.143/pXdN91.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191830, "uuid": "1ba1baca-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191830, "uuid": "1bb73b22-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/Orbt/Orbt.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191830, "uuid": "1bdbbbbb-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191831, "uuid": "1c66ab06-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.242.3.144/pXdN91.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "1cf95cfa-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "1d025e79-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "1d0682f8-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "1d071617-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "1d0af451-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "1d0b6500-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "1d0d4227-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "1d10268f-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191832, "uuid": "1d11aea4-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191839, "uuid": "21528e74-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191840, "uuid": "21dd4098-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191840, "uuid": "21dd4776-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191841, "uuid": "22a57872-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.142.53.43/pXdN91.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191845, "uuid": "24a029f8-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191895, "uuid": "42ea10a3-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://64.89.161.81/iran.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770191946, "uuid": "60ed8021-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.130/w53w7fedz8n7.exe", "Tag": [ { "name": "MaskGramStealer", "colour": "#44b235", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770192139, "uuid": "d40c28c2-019f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.159.176.231:59060/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770192252, "uuid": "176ce93e-01a0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.66:41934/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770192253, "uuid": "180e4640-01a0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.110.161:45585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770192438, "uuid": "86287236-01a0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.2.73:50807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770192556, "uuid": "ccb1b4d4-01a0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.125.49.66:60319/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770192735, "uuid": "3784a2d3-01a1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.169.74:59475/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770192977, "uuid": "c770d8d2-01a1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.226.169.74:59475/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770193270, "uuid": "76851314-01a2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.115.190:59084/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770193417, "uuid": "ce23675c-01a2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.229.164:46782/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770194297, "uuid": "da1d90e2-01a4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.110.161:45585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770194311, "uuid": "e2ed6292-01a4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.80.130:48920/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770194586, "uuid": "865ace7a-01a5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/amka/random.exe", "Tag": [ { "name": "Socks5Systemz", "colour": "#ff0948", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770194789, "uuid": "ff597346-01a5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.72.69:40375/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770194834, "uuid": "1a761a12-01a6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.125.49.66:60319/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770194895, "uuid": "3ed2c43e-01a6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:54865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195426, "uuid": "7b74ecab-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.150.220.218/4SLEYpfAk57hGubo/sapodilla", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195426, "uuid": "7b83f1a9-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.150.220.218/4SLEYpfAk57hGubo/malacca", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195428, "uuid": "7c6052cd-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.150.220.218/4SLEYpfAk57hGubo/froelichia", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195437, "uuid": "81f5c7a4-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.80.130:48920/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195615, "uuid": "ebb0ad44-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.43.162:34047/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195615, "uuid": "ebd714f1-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.82.68:44452/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195676, "uuid": "10061609-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.247.113.210:47551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195676, "uuid": "1059c07a-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.210:47191/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195676, "uuid": "10837d6a-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.242:60297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195676, "uuid": "1087b916-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.247:34783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195737, "uuid": "34d43239-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.213.51:58689/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195738, "uuid": "350bedb2-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.191.74:60192/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195738, "uuid": "3549d1d1-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.230.180:45863/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195738, "uuid": "354f12cb-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.8.193:43576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195786, "uuid": "51ccee85-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://177.92.240.168/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195787, "uuid": "525a2e74-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.110.121.209:5000/api/payload/ps_Q4huLTcs.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195793, "uuid": "5640bfbb-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.84:42863/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195795, "uuid": "571c2f9e-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.111.12:41993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195796, "uuid": "57e2a77b-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.54.69.222:42575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195797, "uuid": "5855f713-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.186.21:41311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195802, "uuid": "5b3e3225-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.192.186:46924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195807, "uuid": "5e44bde2-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.97.37:52471/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195854, "uuid": "7a386a58-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:59200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770195908, "uuid": "9aa23c3c-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.84.212.151:44175/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770196036, "uuid": "e6ff1f3e-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.72.69:40375/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770196146, "uuid": "289c3f79-01a9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.110.107.177:9000/wmglb", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false }, { "name": "Secto", "colour": "#2d5ad2", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770196216, "uuid": "5274d5d9-01a9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.97.187:56111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770196278, "uuid": "774e2e76-01a9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://server.t0up.top/Bin/ScreenConnect.ClientSetup.msi?e=Access&y=Guest", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770197236, "uuid": "b247be35-01ab-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.116/wget.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770197290, "uuid": "d26e9bf9-01ab-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.43.162:34047/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770197713, "uuid": "ce8c3b38-01ac-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.173.128.110:41339/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770197956, "uuid": "5f5de20e-01ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:54636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770198187, "uuid": "e90c31f8-01ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zantrum.life/numbers/BxNRYfbusc225.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770198187, "uuid": "e91bb122-01ad-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zantrum.life/numbers/sofapuderne.hhp", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770198314, "uuid": "34919068-01ae-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.97.187:56111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770199636, "uuid": "4862618f-01b1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.163:54636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770199746, "uuid": "89f4c1c3-01b1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.243.254:7777/91.92.243.254/courageone/courage/gD98GgEgt4g9hGf6H9DGj.js", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770199872, "uuid": "d5971c60-01b1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.119.241:43459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770200177, "uuid": "8b3aa25e-01b2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.119.241:43459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770200351, "uuid": "f2d0a86b-01b2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.12.212:53448/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770200528, "uuid": "5c27e9b8-01b3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.150.126:36342/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770201621, "uuid": "e8077b27-01b5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.109.173:39668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770202398, "uuid": "b6b76703-01b7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.109.173:39668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770202508, "uuid": "f88aedd0-01b7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/5298241443/SXgRkM1.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770202582, "uuid": "24ad3d38-01b8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.78:35027/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770203230, "uuid": "a6a7c2bc-01b9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.194:53383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770203347, "uuid": "ec97f883-01b9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.204.167.78:35027/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770203951, "uuid": "54543583-01bb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.35.143:37056/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770204259, "uuid": "0c0bda97-01bc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.179.87:42792/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770204854, "uuid": "6eeb62eb-01bd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.103.194:53383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770205268, "uuid": "65b7931d-01be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.39.213:40726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770205337, "uuid": "8eac9ea7-01be-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.46.235:50962/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770206999, "uuid": "6d400432-01c2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://47.237.140.12:60145/linux", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770207026, "uuid": "7d79a721-01c2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.224.139:57644/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770207027, "uuid": "7de3bd01-01c2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.202.44.188:36710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770207028, "uuid": "7ecc459d-01c2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.130:39691/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770207312, "uuid": "27f313a8-01c3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/748049926/Vd8YwK6.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770207918, "uuid": "9110b728-01c4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.56.135.195:58845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208102, "uuid": "fec0043e-01c4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.88.145:51871/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208102, "uuid": "fef70b7e-01c4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.169:35747/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208105, "uuid": "005ef49b-01c5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.141.19:55162/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208222, "uuid": "464cf050-01c5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.5.130:39691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208939, "uuid": "f163b32d-01c6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:40380/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770208999, "uuid": "1542261d-01c7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.94:40429/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209421, "uuid": "10c44e1d-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.191.210:34111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209485, "uuid": "374611a8-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.224.139:57644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209599, "uuid": "7addef6d-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.37:35668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209648, "uuid": "9829061b-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeieq7tctzxkqidqpq4fjvtznbupqrpo2w4n4lfmzksehei4dinilii.ipfs.w3s.link/optimized_MSI.png", "Tag": [ { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209650, "uuid": "996f83a7-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bafybeias4uzwo3l336d5ewygv2dd3oqbnlvrer5ndf5wyhjcwkm4igaafa.ipfs.w3s.link/wxwwxh.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209718, "uuid": "c22464af-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.169:35747/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770209766, "uuid": "de826c47-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/keys53/c10ud/bn45", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210016, "uuid": "73d6954b-01c9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://topmatchline.com/api/public/dl/F4lBD64y", "Tag": [ { "name": "HijackLoader", "colour": "#4edb86", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210018, "uuid": "748a5a44-01c9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://yeromas.com/download/YeromasInc.zip", "Tag": [ { "name": "SilentStealer", "colour": "#4bc0e5", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210427, "uuid": "6891ed15-01ca-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8408827406/OR4Zq5r.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210488, "uuid": "8cf4f835-01ca-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-3bc1de741f8149f49bdbafa703067f24.r2.dev/wa1.txt", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210670, "uuid": "f943b5eb-01ca-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/keys53/c10ud/midjrney", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210731, "uuid": "1dd5f4ff-01cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.115.191.210:34111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210865, "uuid": "6d8dee7c-01cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.141.19:55162/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210967, "uuid": "aab9b679-01cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://internet-homepage.digital/ext2.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770210968, "uuid": "ab17c098-01cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.gyan.dev/ffmpeg/builds/ffmpeg-release-essentials.zip", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770211099, "uuid": "f9524ccd-01cb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.8.198:41844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770211150, "uuid": "174dc9b4-01cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:40380/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770211151, "uuid": "18370a67-01cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.7.102:60852/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770211449, "uuid": "c9da3c2b-01cc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8408827406/NjtHard.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770212467, "uuid": "2843aefb-01cf-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.56.63:50911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770212535, "uuid": "5159fa9b-01cf-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.163.48.188:57356/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770212593, "uuid": "73b9e996-01cf-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.141.189:47514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770212648, "uuid": "949048d3-01cf-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.78:37966/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770212896, "uuid": "2837c120-01d0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.253.82:41324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770212957, "uuid": "4cada4ee-01d0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.46.235:50962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770213196, "uuid": "db29d82e-01d0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.82.58.237:41655/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770213741, "uuid": "1fd41e0e-01d2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.37.226:47080/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770213810, "uuid": "48d8cb62-01d2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.113.205:39657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770214041, "uuid": "d26b5e79-01d2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.120.141.189:47514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770214213, "uuid": "392ca435-01d3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.78:37966/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770214448, "uuid": "c55718af-01d3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.86.83:42807/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770214515, "uuid": "ed44f13c-01d3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.56.63:50911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770214639, "uuid": "37068273-01d4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://174.163.48.188:57356/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770214999, "uuid": "0dcc8593-01d5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.113.205:39657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770215474, "uuid": "28ba2b36-01d6-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.37.226:47080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770215839, "uuid": "0232a251-01d7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.248.66:48945/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770216254, "uuid": "f99e4d4e-01d7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.94:40429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770216312, "uuid": "1c3bff1f-01d8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.72.135:52127/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770216428, "uuid": "615e978e-01d8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://retrodayaengineering.icu/GQW.hta", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770216914, "uuid": "82f65802-01d9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.190:48754/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770217395, "uuid": "a1c61716-01da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.102/imtophaxorassasinonfortniteandgtacombined/x86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770217395, "uuid": "a1ce60f0-01da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.102/imtophaxorassasinonfortniteandgtacombined/mips", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770217395, "uuid": "a2091e38-01da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.120.163:57295/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770217458, "uuid": "c79e3b8d-01da-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.130.37.177:53140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770218127, "uuid": "55e0edf5-01dc-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.252.23:55595/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770218467, "uuid": "20baef44-01dd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/854508959/YjRIeKJ.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770218535, "uuid": "493c684d-01dd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.162.17:44447/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770218650, "uuid": "8d9fced6-01dd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.220.96:52682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770218838, "uuid": "fdb428cb-01dd-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.55.194:49946/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219068, "uuid": "86cac7be-01de-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8408827406/ISVG0ca.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219147, "uuid": "b5f25548-01de-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.198.85:39211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219376, "uuid": "3eb0f587-01df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.198.85:39211/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219488, "uuid": "81910085-01df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.252.23:55595/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219623, "uuid": "d1cc1a5d-01df-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.184.86:51989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219799, "uuid": "3a9a52f4-01e0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.155.25:45094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219856, "uuid": "5cd37883-01e0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.55.194:49946/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770219975, "uuid": "a3ea2a7b-01e0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.162.17:44447/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770221407, "uuid": "f9107366-01e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pastebin.com/raw/h0s92FSf", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770221409, "uuid": "fa45cbd9-01e3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/relagx/wooork/main/DiscordFIx.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "SalatStealer", "colour": "#f59633", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770221598, "uuid": "6b05ed98-01e4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.155.25:45094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770221772, "uuid": "d2c8e191-01e4-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.184.86:51989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770222197, "uuid": "d00942ab-01e5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.10.79:44636/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770222794, "uuid": "340b7cf1-01e7-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.7.102:60852/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770223332, "uuid": "74a64569-01e8-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.47.111.12:41993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770223570, "uuid": "028c49ae-01e9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.26:42981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770224657, "uuid": "8a8b02d5-01eb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.86.126:45870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770225188, "uuid": "c71147ee-01ec-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.71.15:34958/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770225620, "uuid": "c8967db3-01ed-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.136.31:60727/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770225675, "uuid": "e917e462-01ed-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.10.79:44636/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770225676, "uuid": "e9a088f3-01ed-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.6.239:48241/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770225788, "uuid": "2c8828e9-01ee-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.68.67:57777/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770226038, "uuid": "c1477238-01ee-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.71.15:34958/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770226219, "uuid": "2d54d9fe-01ef-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.86.126:45870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770226278, "uuid": "50883739-01ef-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.22.63:38665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770226328, "uuid": "6e64367a-01ef-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.114.136.31:60727/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770226444, "uuid": "b3b0fc92-01ef-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/stp26det/amd64/liveserv", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770226761, "uuid": "70396196-01f0-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.6.239:48241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770227183, "uuid": "6c289735-01f1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.130.18:55531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770227297, "uuid": "afc50b72-01f1-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.232.69:50202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770227487, "uuid": "215b35c1-01f2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.22.63:38665/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770227489, "uuid": "220e2649-01f2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.61.230:42540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770227665, "uuid": "8b7edc3f-01f2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.71.64:41962/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770227785, "uuid": "d2bee823-01f2-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.71.167:40772/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770228249, "uuid": "e70c4997-01f3-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.183.254:60596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770228738, "uuid": "0b14500d-01f5-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.130.18:55531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770230719, "uuid": "a7852c0d-01f9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.9.224.148:49545/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770230780, "uuid": "cc099212-01f9-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.208.62:42590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770230956, "uuid": "34df9d6e-01fa-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.9.224.148:49545/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770231321, "uuid": "0ea89e95-01fb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.167:42858/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770231445, "uuid": "582f0b58-01fb-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.45.116:52591/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770232646, "uuid": "23f0f972-01fe-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.5:60994/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770232938, "uuid": "d25227dd-01fe-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.187.66.105:33689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770233000, "uuid": "f725ae20-01fe-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.100.25:48810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770233898, "uuid": "0e9fecf6-0201-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.49:36165/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770234187, "uuid": "ba9f5ebf-0201-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770234187, "uuid": "baba70e7-0201-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770234187, "uuid": "baedc09e-0201-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770234188, "uuid": "bb1d9ff4-0201-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770234380, "uuid": "2d6a70b0-0202-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.100.25:48810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770234978, "uuid": "91eca496-0203-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.17.184:41401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770235277, "uuid": "44860edf-0204-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.68:34621/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770235757, "uuid": "62b88ad6-0205-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.149.142:44398/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236171, "uuid": "59443b06-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236171, "uuid": "597af286-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236172, "uuid": "5993d4b9-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236172, "uuid": "59fb13e3-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "7b9a1a49-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "7b9a26d6-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "7b9d4ad0-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "7b9d6557-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "7b9d82a7-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "7b9d8da7-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770236229, "uuid": "7b9dddaa-0206-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.242.13/manji.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770237199, "uuid": "bde006ae-0208-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.201.110:51836/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770237254, "uuid": "de9d1964-0208-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.63.49:36165/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770237318, "uuid": "04f49eb2-0209-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.160.182:46520/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770237436, "uuid": "4b437849-0209-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.17.184:41401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770237487, "uuid": "698e6ad0-0209-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8597337803/zep3GR4.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770237550, "uuid": "8f515b28-0209-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.238.26:42981/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770237619, "uuid": "b87bbe6e-0209-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.69.153:39400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770238393, "uuid": "856f6aa1-020b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.14.63:35114/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770238456, "uuid": "ab67c0bf-020b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.220.14.63:35114/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770238818, "uuid": "8319a842-020c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.201.110:51836/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770238871, "uuid": "a24da5d7-020c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.150.41:35044/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770238878, "uuid": "a6fc3420-020c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.4.63:47101/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770238878, "uuid": "a6fc359b-020c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.31.102:60404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770238883, "uuid": "a9ac2ad0-020c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.210.87:34497/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770238937, "uuid": "ca1de02a-020c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.3.6:54045/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770238994, "uuid": "ec1fce62-020c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.237.151.246:42956/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770239658, "uuid": "77e492e9-020e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.89.215:55765/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770239716, "uuid": "9a00730e-020e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.200.37:48461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770240438, "uuid": "487a011f-0210-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.55.68:60211/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770240550, "uuid": "8b683852-0210-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.9.230:55657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770240677, "uuid": "d704f792-0210-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:46998/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770241218, "uuid": "1946cac1-0212-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.200.37:48461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770241454, "uuid": "a63c6c0f-0212-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.89.215:55765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770241692, "uuid": "34210e43-0213-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.40.63:33575/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242595, "uuid": "4e2b43c1-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.228.78:46998/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242595, "uuid": "4e38b71f-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://116.139.160.182:46520/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242596, "uuid": "4ea2fcf6-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.87.161:38895/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242646, "uuid": "6cdbe9a2-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.arm4", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "6e430438-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "6e518c7c-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "6e5634b1-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "6e5d5e87-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "6e604dc0-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "6e62be41-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.arm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "6e7474f0-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "6e7ec8b1-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.arm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242649, "uuid": "6e818ab8-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242707, "uuid": "913f140d-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242708, "uuid": "918be4f5-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242709, "uuid": "920bc298-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242710, "uuid": "929eb9be-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242767, "uuid": "b48dd95d-0215-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://89.32.41.15/manji.dbg", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770242951, "uuid": "229afdb4-0216-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.40.63:33575/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770243248, "uuid": "d33ad299-0216-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.170:36095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770243552, "uuid": "88dd729f-0217-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.94.5:60994/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770243690, "uuid": "dac7b314-0217-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.155.81:50516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770244875, "uuid": "9d64a21e-021a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.163.121:38616/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770245115, "uuid": "2c51629b-021b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.61:48511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770245948, "uuid": "1cc2a231-021d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.123:38287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770246186, "uuid": "aa634b1e-021d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.48.123:38287/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770246616, "uuid": "aadef31f-021e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.163.121:38616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770247112, "uuid": "d2435350-021f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.192.253:60326/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770247275, "uuid": "33b4ebfd-0220-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.247.164:49232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770248532, "uuid": "20eac74b-0223-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.231:59647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770248717, "uuid": "8f11e01e-0223-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.65:46650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770248772, "uuid": "afb71554-0223-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.192.253:60326/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191765, "uuid": "f4fa92d2-019e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "1.181.224.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191585, "uuid": "89b731f5-019e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "104.223.84.17", "Tag": [ { "name": "hta", "colour": "#4f70a0", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770197944, "uuid": "584df07c-01ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.80.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770174064, "uuid": "becccedb-0175-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.80.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770231306, "uuid": "05a27fc2-01fb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.115.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208085, "uuid": "f4f15958-01c4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.24.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770248705, "uuid": "88191e71-0223-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.28.65", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208985, "uuid": "0d3452c0-01c7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.31.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770245944, "uuid": "1a5cc563-021d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.48.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770186545, "uuid": "cda5a172-0192-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.48.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187984, "uuid": "27ad0929-0196-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.59.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770227765, "uuid": "c6c02cc6-01f2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.71.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770240665, "uuid": "cfd2e980-0210-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.228.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770178445, "uuid": "f19072ac-017f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.248.141.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770193385, "uuid": "babbe83f-01a2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.229.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770182105, "uuid": "77522a1d-0188-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.229.191.153", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770181025, "uuid": "f35ffe95-0185-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.169.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770207007, "uuid": "71d60504-01c2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.5.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167164, "uuid": "adee1ea6-0165-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.6.47", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770166744, "uuid": "b381eeef-0164-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.101.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770174184, "uuid": "05f49f7b-0176-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.229.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770211145, "uuid": "14a50729-01cc-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.7.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770171425, "uuid": "9958121e-016f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.241.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770182765, "uuid": "0083ee3c-018a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.196.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770222184, "uuid": "c87c9aaa-01e5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.10.79", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195724, "uuid": "2cead0be-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.230.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770168006, "uuid": "a3b88fd2-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.232.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770170764, "uuid": "0f6f4dc0-016e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.15.132", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770218825, "uuid": "f62ddadc-01dd-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.55.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770237305, "uuid": "fd3027ef-0208-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "116.139.160.182", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770202564, "uuid": "1a1a1464-01b8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.204.167.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770244864, "uuid": "965b8a24-021a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.163.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770168964, "uuid": "def8604d-0169-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.249.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770194763, "uuid": "f0324eea-01a5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.72.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770213785, "uuid": "39f52185-01d2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.113.205", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770247084, "uuid": "c1f31057-021f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.192.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770174424, "uuid": "951c8dc0-0176-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.236.186.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164105, "uuid": "8e94d5a9-015e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.57.67.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770192545, "uuid": "c5f2da0f-01a0-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "118.125.49.66", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770225605, "uuid": "bf9d17c5-01ed-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.114.136.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770227644, "uuid": "7e7e1cad-01f2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.71.64", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770240545, "uuid": "8823d420-0210-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.9.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770227164, "uuid": "60745b03-01f1-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.130.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770219785, "uuid": "323fae66-01e0-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.155.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770243664, "uuid": "cba86a48-0217-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.155.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770217445, "uuid": "bfa18a05-01da-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.130.37.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770219607, "uuid": "c82ec7de-01df-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.184.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770181744, "uuid": "a0560a0e-0187-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.56.156", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770208085, "uuid": "f4f14b83-01c4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.141.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195785, "uuid": "513a3a5b-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.186.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770238864, "uuid": "9e77ab8e-020c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.150.41", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195724, "uuid": "2ceae2ef-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.8.193", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770171064, "uuid": "c28e9f4d-016e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.101.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770177724, "uuid": "43fb0539-017e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.103.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770174064, "uuid": "beccab0a-0175-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.33.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770207007, "uuid": "71d624c1-01c2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.224.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175565, "uuid": "3cf25fcf-0179-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.81.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770203944, "uuid": "505b4c27-01bb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.35.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770219125, "uuid": "a8f21777-01de-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.198.85", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195785, "uuid": "5139ccc4-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.47.111.12", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770175924, "uuid": "1367f2b3-017a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "130.12.180.124", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770180364, "uuid": "698cce10-0184-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.104.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770164705, "uuid": "f4418ad0-015f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.173.128.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770238984, "uuid": "e6051056-020c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.237.151.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187984, "uuid": "27ad0cfb-0196-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.227.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770205325, "uuid": "8752bc40-01be-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.46.235", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209404, "uuid": "06d42266-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.115.191.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770179465, "uuid": "51c006f0-0182-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.39.253", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770200344, "uuid": "eec203bc-01b2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.12.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770225664, "uuid": "e2919b9a-01ed-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.6.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770212585, "uuid": "6ea54182-01cf-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.120.141.189", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770242584, "uuid": "47a788d3-0215-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.87.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770192244, "uuid": "12c128a4-01a0-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.110.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770180184, "uuid": "fe6f8332-0183-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.49.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191825, "uuid": "18b1ab71-019f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.242.3.144", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195424, "uuid": "7a6557a4-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "194.150.220.218", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770218525, "uuid": "432b1283-01dd-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.162.17", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770174064, "uuid": "becce5af-0175-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.172.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770238864, "uuid": "9e77be65-020c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.210.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770165006, "uuid": "a75afc87-0160-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.208.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770176825, "uuid": "2c026b89-017c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.14.15.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770174064, "uuid": "becd2a32-0175-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.202.214.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770226265, "uuid": "48990e5d-01ef-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.22.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195606, "uuid": "e6842e3c-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.43.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195785, "uuid": "513a32c6-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.192.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195724, "uuid": "2cec1be5-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.191.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770207007, "uuid": "71d5fa1f-01c2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.202.44.188", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770218106, "uuid": "49b1bb2b-01dc-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.252.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770228245, "uuid": "e510b509-01f3-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.183.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770231424, "uuid": "4be45f34-01fb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.45.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770238384, "uuid": "8058cdc5-020b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.220.14.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191224, "uuid": "b2d6b2bc-019d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.115.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770180784, "uuid": "63e23f9f-0185-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.82.58.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770171965, "uuid": "db93476a-0170-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.146.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770204246, "uuid": "04306dbe-01bc-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.179.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195606, "uuid": "e683d0fe-01a7-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.82.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770213725, "uuid": "161bb35c-01d2-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.37.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187445, "uuid": "e6570f7f-0194-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.170.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770234965, "uuid": "8a371c5c-0203-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.17.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770237184, "uuid": "b53288f1-0208-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.201.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770183245, "uuid": "1ebd0d6a-018b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.214.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770239644, "uuid": "6f75267a-020e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.89.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770207906, "uuid": "8a04e19a-01c4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.56.135.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190805, "uuid": "b8fa91a7-019c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.128.150.171", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190443, "uuid": "e153075f-019b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.159.176.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770174124, "uuid": "e248d048-0175-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "46.183.133.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770206284, "uuid": "c34bb5a1-01c0-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "47.237.140.12", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770171664, "uuid": "28199c81-0170-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.45.140", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770194285, "uuid": "d327b1c0-01a4-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.80.130", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770240425, "uuid": "40bd7656-0210-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.184.55.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770180124, "uuid": "daae3474-0183-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.127.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770225184, "uuid": "c4552015-01ec-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.71.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770182706, "uuid": "dda88256-0189-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.210.66.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770227285, "uuid": "a890d535-01f1-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.232.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770201606, "uuid": "dea22c86-01b5-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.109.173", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770241684, "uuid": "2f7a29dd-0213-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.40.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770216307, "uuid": "1921bfdb-01d8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.72.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770187265, "uuid": "7ad9ab8e-0194-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.197.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770239705, "uuid": "93c17586-020e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.200.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770188525, "uuid": "69fff784-0197-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.54.69.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770190505, "uuid": "0632d59b-019c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "64.89.161.81", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "script", "colour": "#211e21", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770195785, "uuid": "513a48ca-01a8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.110.121.209", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770167765, "uuid": "141f9f6e-0167-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.221.157.235", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770196144, "uuid": "2774daee-01a9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "89.110.107.177", "Tag": [ { "name": "Arechclient2", "colour": "#1b320a", "exportable": true, "hide_tag": false }, { "name": "Secto", "colour": "#2d5ad2", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189245, "uuid": "17033cc8-0199-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.241.116", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770217384, "uuid": "9b60add6-01da-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.92.242.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770189786, "uuid": "59901003-019a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.63.185.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209646, "uuid": "96ed553d-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeias4uzwo3l336d5ewygv2dd3oqbnlvrer5ndf5wyhjcwkm4igaafa.ipfs.w3s.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770209646, "uuid": "96f4df7f-01c8-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bafybeieq7tctzxkqidqpq4fjvtznbupqrpo2w4n4lfmzksehei4dinilii.ipfs.w3s.link" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770197346, "uuid": "f3ccacc6-01ab-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "c-sougou.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770210965, "uuid": "a97eeea5-01cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "internet-homepage.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770197344, "uuid": "f2c199cc-01ab-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "jkem45.cndyals.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770191765, "uuid": "f5143db9-019e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "panychurasc0.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770196269, "uuid": "719942ff-01a9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "server.t0up.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770210006, "uuid": "6d89bfef-01c9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "topmatchline.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770210965, "uuid": "a9786548-01cb-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.gyan.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770210006, "uuid": "6d69c754-01c9-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "yeromas.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770198185, "uuid": "e7f2fac0-01ad-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zantrum.life" } ] } }