{ "Event": { "published": true, "date": "2026-02-19", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-19", "timestamp": 1771546521, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "b7a03a28-4531-44ce-8672-e40b0d071842", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1771460416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771460416, "uuid": "0ba83e74-8ca3-4f3b-9919-3aebbe73338a", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771460416, "uuid": "f24f4f9e-3380-402d-8dd6-28d6ae6b150f", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771460416, "uuid": "c02ed2c0-7025-44d8-9ca7-b755fe42fecd", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771460416, "uuid": "7d76fc84-157e-432a-8f75-bf817ab42665", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771460416, "uuid": "19d2a479-7c06-45ba-8b7c-73aff227fc82", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "46100740-0d2d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771462352, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462352, "uuid": "072a58b5-3baf-4352-a1c9-1dad6ec0c56c", "comment": "Malware payload (Mirai)", "value": "5727afd752c2ceaa752382523089dd36", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462352, "uuid": "49251080-a790-4c5f-b434-be66fff12635", "comment": "Malware payload (Mirai)", "value": "917f193eace691f1778957bf937bc4252a18f8e2b9a9ddd72399bc689fa786f7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462352, "uuid": "e68141f1-22c5-4d23-9205-ab8086dbfd93", "value": "T1F6133A92B401AD7DF85EE73EC0930A09F131A79511821A3763A3FD776C322A85D76E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462352, "uuid": "8f35a21d-8d63-4a40-88b8-2513b2361147", "value": "768:0xqFTD4t0MoBjFEWEw0Cmk+3oC6WluD811JtTRHGtHwl5bsW71:COaWV+WLHVs6WkD811bRHGtwlXB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771462352, "uuid": "7364fc90-c7fc-4005-afbe-bc25cb1727c0", "value": 45516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462352, "uuid": "eeadc8de-6f3d-47d6-a807-2907f9b996fd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bba0bc0d-0d2d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771462549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462549, "uuid": "8a6ff8e9-15e2-4ace-837f-fb21bb33d0b1", "comment": "Malware payload (Mirai)", "value": "64e313cff16c521834378369f4ceed41", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462549, "uuid": "0eabaa49-a41f-4144-8cdd-79b6ea303471", "comment": "Malware payload (Mirai)", "value": "c6edd8231759bf8260a5115c72869987ddfa5166c4338bb7145be81c926e9961", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462549, "uuid": "554fb170-9821-4e63-a455-206f89512744", "value": "T1F453831AAF650FFBEC6BCD3745A91B49349C640A12E93B367934C818BA5B20F45E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462549, "uuid": "26c80dee-d793-41aa-9706-e85d4e9a80bf", "value": "1536:yGtQ8AKyjOz8lIrDXUAF/MSL3bKL2LZgsF8qD:yM6KyazQODUNL2LB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771462549, "uuid": "c21d3c6d-133c-4843-a06e-90515cacd48f", "value": 64380, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462549, "uuid": "27bcd26c-5844-4eb3-86d0-98126c50f5c8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d73355b0-0d2d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771462596, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462596, "uuid": "aa9c0acd-a84a-4442-bb7b-eef7e734ddbf", "comment": "Malware payload (Mirai)", "value": "a2d6f924258ed138434c4720e09ad545", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462596, "uuid": "9f506a78-2e66-4c68-ba2b-f83028a96498", "comment": "Malware payload (Mirai)", "value": "9393ddf5ecb9939dd3ce2ce99372f374fd65b7a6ed4bd4d844e922a507b2866e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462596, "uuid": "98fe6f8a-ae73-495c-a9fa-7062edc65f77", "value": "T125B35B17F4C194FDC8DAD2748BDFA216E972F06A2229B25E27D05F263E5EE201B1D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462596, "uuid": "28dcad62-caca-4c38-bded-fd848253cf6e", "value": "3072:DjuZiQepkkJS5tQhRp+A4OMN4ORKiFl3cNLNkDkFnGm4VHsOgdXEJXJ:OZiQejbhn+A4OMN4ORKiLsHkDkFl7dX2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771462596, "uuid": "a3eff463-3a76-4dc8-84ce-3b964bbd3825", "value": 109096, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462596, "uuid": "d350041e-0c84-435d-a15a-1d7b3f543d26", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "39ae092c-0d2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771462761, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462761, "uuid": "3e300cb3-8cdb-493c-9896-2b11022eff2d", "comment": "Malware payload (Mirai)", "value": "2c3a7d3cadca18d5263d670ec0ae08b8", "object_relation": "md5", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462761, "uuid": "e228806c-1bee-472b-b662-bb182cb4e528", "comment": "Malware payload (Mirai)", "value": "a0e8e485da7f4bba21b8ea1db82b6b97a834825744cd331e346967ef75f44ffb", "object_relation": "sha256", "Tag": [ { "name": "64-bit", "colour": "#5ff336", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "x86-64", "colour": "#fabfeb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462761, "uuid": "e1cfd3a3-2ce5-4782-9ebc-44095f2aa6d7", "value": "T18A2329035491C0FDC955C270AB3FA636C922F47E123AB59D73E0BE226E4AE311F5A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462761, "uuid": "c8d1bff4-aff4-4eed-9129-694040c0e987", "value": "768:FkrR8ysZAY+OGZZRw4xSwPtKOoTvHjKRDACGyjltp4B6gC:6d8y2+OOJy7DckCGyp4B6gC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771462761, "uuid": "a83b5045-4826-4359-9a89-4c1fe597116e", "value": 46400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462761, "uuid": "bd4449e3-77c4-4697-aeab-848188d5ef10", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "95452862-0d2e-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771462914, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462914, "uuid": "0c40503e-e133-408e-91d0-85c9a2f1b88d", "comment": "Malware payload", "value": "0290adb220044f0778d67969a2ab528d", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462914, "uuid": "e76038a0-e5c4-4e0c-b4df-520d130ad14c", "comment": "Malware payload", "value": "ef8e6844777b1ac6bc75366a198f861d0cd21c01d686027f9a05756a17d24275", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462914, "uuid": "9f89a176-440d-4572-884a-8ef235d703fe", "value": "T1DE8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462914, "uuid": "00654a5f-08c9-4323-883d-a0be4e2f4a55", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnAWaXVN/:XEKltp9txAX/yr2pbAWWVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771462914, "uuid": "f8a8a10e-6c34-4628-9bd8-720169630a67", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462914, "uuid": "9a4310ea-a292-4a62-b692-d7f03f03e4f2", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aa8e5215-0d2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771462950, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462950, "uuid": "50390024-e45f-4427-b202-417c0192dfc7", "comment": "Malware payload (Mirai)", "value": "91ca7bc2a9b6d68f7eb6386593751a72", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462950, "uuid": "d3a72a30-6b55-4aef-8434-3b015f084869", "comment": "Malware payload (Mirai)", "value": "6050a7d8db8a41d37b07fef07289e4691af121d99348f5978ccca684ef727054", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462950, "uuid": "dd937645-729a-4e7a-9937-05e9649f1a16", "value": "T128B30A9ABC458B10D5D565BAFF0E618D33134BB8E3FA7113DE149B2A638AC5B0B3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462950, "uuid": "5f44dd0b-4d5d-4a5f-b053-8bc0d0349e04", "value": "3072:pWBGHrTrk5xENjfCpuxSeuqd82bMrOxj/thv8ZemOgQx+R3D:fkcmpoSeuqd8DrCj/th0eZga+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771462950, "uuid": "d2f0eb73-8fc3-4ff2-9c89-4dbc05ef8b5b", "value": 117996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462950, "uuid": "e507d445-56f4-43d6-9537-610ba20e9484", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e5666676-0d2e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771463049, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463049, "uuid": "60591e0e-b35c-4a1c-814d-04a65b401429", "comment": "Malware payload (Mirai)", "value": "a62e3114ba91dd8ecbf10f7aa1260b90", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463049, "uuid": "53d4a8da-5d2e-477c-9b6b-848950dba967", "comment": "Malware payload (Mirai)", "value": "b0c3009d6cb05ea40dcb0107603c63fc20354fa1abdb3e505ed6d839924483a8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771463049, "uuid": "0a38ec49-ca1a-4c7a-b77c-3f26a982d498", "value": "T13B134BC1A643C1F2EC5212F5147B67628F76E4364A7DFA92EBA92531FC03B10960B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771463049, "uuid": "5772edbc-e17a-4156-be83-c25d826302f0", "value": "768:QQaiSup66OkEgy5oD5YQuj4J0UTeU4wQOnwspVI/4bOGd7nX:QQaiSuptOkEX6D5YQ/J0UeUDtwspDbOY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771463049, "uuid": "7d386bc3-340c-4f4e-b475-8d0d73bb80cb", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771463049, "uuid": "83bc07ac-82f7-4a21-9a31-6e4eab59fa76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de5c23b1-0d2f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771463467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463467, "uuid": "1a93f8b3-5de6-4d7b-9550-4104bd607ebb", "comment": "Malware payload (Mirai)", "value": "4d237b4edc24b89a536944c74636dc77", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463467, "uuid": "d01cdb19-7d18-47fa-8184-9be6a769db43", "comment": "Malware payload (Mirai)", "value": "3c40dcd3f25e5eda1a32372e5e7b541973ee57c2bcfb2b7b191afca0a10ee957", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771463467, "uuid": "f9b765c4-4d0a-4053-9bed-055de3a15d58", "value": "T1113319B51516F2BCE9E22078F40720F529530A1C3ADCE2D3B0930579FFB5B48B96AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771463467, "uuid": "6a5de89e-0138-48bf-b0da-348ae78c4665", "value": "768:zMClhMqB0yBuKw3GoACzQyZRtlkABYxQhTUnRVww31:zF0vZ2oR9DtlksYi0os1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771463467, "uuid": "269a1e90-a038-4b74-bddc-279f4ec575c0", "value": 50632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771463467, "uuid": "445d2fb1-e5d5-41ab-9f48-0741d846af9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b029b045-0d31-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771464248, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771464248, "uuid": "c0dd9d06-8dfe-4be4-b3ee-a798ddc9f509", "comment": "Malware payload", "value": "bb6f6d93af0d52bf32115cd4efe5d2b9", "object_relation": "md5", "Tag": [ { "name": "coinhive", "colour": "#269d5b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771464248, "uuid": "b46640bc-a6b1-43d3-9851-ed1cdad340c2", "comment": "Malware payload", "value": "c3831a137c36431cd3850564ac6a7a487bbe33e84d1edfa7b11cf0452bd81217", "object_relation": "sha256", "Tag": [ { "name": "coinhive", "colour": "#269d5b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771464248, "uuid": "4f923d0c-17d3-44df-86b8-1191cfa3b646", "value": "T1FA4296E8F7ADA63A473E10A62A3E5B9D743C4073A90A8C53BC6C953C5B90E5D1119C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771464248, "uuid": "60d1e93e-7190-469c-96bd-6c503622313a", "value": "192:Rc/iaYi34sgkL+0o7lDv6HRCMz8PGjvgcBMHaC14s7EBurmrehXxnLKIuSqusf:Rfo8uRCMz8+9MHaK7EBuyGXxnduXf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771464248, "uuid": "d30d2d3a-59bc-472d-82a6-7f51579bb20f", "value": 12801, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771464248, "uuid": "34cbfdaa-1f4b-4a91-88c5-4b6ee531f425", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771464439, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771464439, "uuid": "a681a3de-b8ed-42c2-a0ab-073797fe24b7", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771464439, "uuid": "b8ac476a-3adf-4424-8e9a-851fe482d12a", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771464439, "uuid": "1502d64a-e6b4-4e1b-8024-1ecc41c94763", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771464439, "uuid": "b38bbfbd-cad3-41f3-83ae-8a374d525f9e", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771464439, "uuid": "751f92bd-ac58-4633-967b-494cefb1566b", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aaa25ed5-0d33-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771465098, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465098, "uuid": "3211a764-7ea5-4787-884b-42d44ee75363", "comment": "Malware payload (Mirai)", "value": "b89260a7b3e15d98861336d285880993", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465098, "uuid": "acda12bb-f6ff-4da8-b520-67691dbf3047", "comment": "Malware payload (Mirai)", "value": "4523165c9c78e89086acff14f16b660606ecea6daae833e39fb3983a8bf73f1c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465098, "uuid": "5379b7ae-853a-402c-94c8-a24cc1d0e34e", "value": "T1A1A3299ABC85C602C5E1A1F2FB1E51CD371643B8E3E67147CD18AB29674F8670E3B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465098, "uuid": "02627803-50b8-44bd-8755-e38e6773a10c", "value": "1536:E4I6S0ZNrv97r5f4tCxKpvq5cm2goCbqRWw5Wv2Db+R:E4I6lrV7SkxKpvq5co2RLM2D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771465098, "uuid": "95255422-cb92-4e1e-8029-6ed2efb6b60e", "value": 103820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465098, "uuid": "80d285c4-b9a9-4b42-b622-1caf23f12e4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c880080-0d34-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771465369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465369, "uuid": "9e9ef68f-eaf0-40b8-9fe2-62ab2d2323bc", "comment": "Malware payload", "value": "448074b95f62e3eae94e3ddfba603599", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465369, "uuid": "9324e399-6c5f-48a2-be01-1088554b1a8c", "comment": "Malware payload", "value": "9f8fd2b9ff53df93efb7dc1e51ad976bb1c822bb24c9d5f007ef380b15942ad5", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465369, "uuid": "ec95d688-2076-49f3-a109-bbe7901e0500", "value": "T1FD330183DF8D5E9CAF6C49C10A26828B9BFC687135931F20F84582326F055C7A1DBB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465369, "uuid": "07d269b7-aff5-4130-81f8-faccb8c90986", "value": "768:aQHfnj+DuFFC15QgHv414Mxm4J0aSK10ywHStGtVUwoq2HOtB4s4rUq783FHu3Ca:5HfjVLCgFxD11tG8wvU9rUrFtc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771465369, "uuid": "cd8393fb-7711-4e6d-927d-b9957f0e4dff", "value": 53504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465369, "uuid": "6a8ad9ac-d80a-4fa5-bae6-c40ea2c9daff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c5a8f2d3-0d34-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771465573, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465573, "uuid": "59e60e6a-5196-47ab-870a-0ad6e4c1fc75", "comment": "Malware payload (Mirai)", "value": "faecef4748ad176736c1da6979a1db3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465573, "uuid": "8ed35414-13c0-45ac-af32-69bc1fe9070a", "comment": "Malware payload (Mirai)", "value": "8a669e6c2680886177f083ca7a3a7814199ba318d4861fe44014ab81838ab605", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465573, "uuid": "43453323-a679-4371-84b0-457a9671af82", "value": "T117039E53C93A2D94C63985B4F8219B7E2B53E949A5936FD6D826C274C003F9CFC2D2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465573, "uuid": "9178732c-954c-4e1d-b823-e6ba6416fd2a", "value": "768:iTUc2eBs3+EuYG6TKjj53iGf/AER9AKblZ3ay3VJ5egoS6VnYUvC5YMy3:4D3BsOEw5JLRQS2rCje", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771465573, "uuid": "5c2faba2-72ef-452a-a7f0-f0984c62a075", "value": 39908, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465573, "uuid": "89d23841-cae9-4632-9e28-c326856ef176", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1771465691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465691, "uuid": "58c79abf-9e56-4638-bee1-b076bbd4f56a", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465691, "uuid": "5989a77a-a43d-4899-a7b3-1b743de8de60", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465691, "uuid": "0039212d-86a2-43eb-95a9-2661d2c85cd2", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465691, "uuid": "a38dcded-e111-4067-956c-c870081f872e", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771465691, "uuid": "83332e9c-52f6-441c-af49-a82d82302288", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "54f69be9-0d35-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771465813, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465813, "uuid": "f77a1c2a-9da8-40f1-a234-cdbbf2819102", "comment": "Malware payload", "value": "88c91a4c269d392630a8840bea0fc1d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465813, "uuid": "22ef1263-b564-4235-8daf-72caa3c3f76c", "comment": "Malware payload", "value": "41da9babfc9314663b1093cde26b51be006d4a50eba524e296e9195e012cb5ed", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465813, "uuid": "4848a400-8b69-4fd5-93ad-b778c44db39a", "value": "T100F3A45E6E218F7DF278873587F74A35E39923D623E1CA48D2ACD5101E6038E541FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465813, "uuid": "553c9b75-797e-46a8-b504-6ad7eaf35685", "value": "3072:mLHHUtlyy/2XF5Ud6THr1GNErR25MPgdgHK:An63/2XLkSHr1CElGogdQK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771465813, "uuid": "a0c4e106-b083-4082-b485-7f117f2a7634", "value": 163740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465813, "uuid": "c18d88dc-1fe5-42be-bf86-3a07a937dc76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bd640f50-0d35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771465988, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465988, "uuid": "28359d2f-950a-4c13-8826-f37de91c0501", "comment": "Malware payload (Mirai)", "value": "eaa298689f6bfb2ee53586f77e87893b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465988, "uuid": "0528bca2-165a-421c-bdf0-ee5b3e7062f7", "comment": "Malware payload (Mirai)", "value": "64b1dda6ef014880695645b59230d3ae68d4c7562b189971f6fdb14ac29d95f2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465988, "uuid": "a4ce9722-ded1-4452-8c9c-f1ca75102811", "value": "T1F81349C59A43C0F1EC1112F110779B519F72A436AA79FB47E7A93A32FC02B1196173", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465988, "uuid": "5abe03da-6ea9-4f62-96eb-8803c1f16c2c", "value": "768:x73jOIDzzrq7WiEu+RiUjreAEx63a7x2Uq1z7yvEdTpKMxn:FjOAzwvEuP4aAEgwvkWItKKn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771465988, "uuid": "27f22a61-fdb4-41c8-8365-1d3620dd4aea", "value": 41840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465988, "uuid": "845562e2-4590-48d3-bdc9-b9db7d9a99c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e601efb-0d38-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771467037, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771467037, "uuid": "cc06a773-a336-480c-9cca-0a9299be22f9", "comment": "Malware payload (Mirai)", "value": "4e5e21ad42e6f670552a86c969e1b901", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771467037, "uuid": "905b6b3e-af79-44ea-bcaf-7384b565e60e", "comment": "Malware payload (Mirai)", "value": "846fb199ef7b14be2b0f3fa419fdf4190f582bfbfacd7447d1f1cfbc51f5d8e3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771467037, "uuid": "c60ea0b5-dc49-438a-8517-03e7faa1fbdc", "value": "T1C4131742B3180547D5631EB0353F47E0E7ABAE8122E4F288760F9B4DC171E77A946E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771467037, "uuid": "aa84712b-059a-40bb-8775-7b5c2208eaa5", "value": "768:TuZQBal6xzFogyxBvDMTccDP1UqI9XFPTMWy6/janpyvsM73V+Otauo:T0UFogW5DMT3DyqWPwWy3nYx73V+uaD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771467037, "uuid": "4910e8b4-b2a8-4626-8e01-749be0037058", "value": 44168, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771467037, "uuid": "8e37bdfa-23c7-4bb0-a1e4-d946fe7f09c6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "180f3958-ff15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771472118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "337265e3-a5c5-440a-925d-af26c5bdb797", "comment": "Malware payload (Mirai)", "value": "f3b3f5f7816b5bbfcfed893277989412", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "5eb41376-9c91-4e93-9c40-541b045a6422", "comment": "Malware payload (Mirai)", "value": "bca6f88086f516375de8c9ad345012562a48b1216d0c0685a1b1d05aa38e3fe5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "846b0a8a-1589-43e4-b4aa-06556a32e5e7", "value": "T11924B61A3A22EFFFF168863107F38A7097E5259636A19745F26CD71C1F2028D681F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "f1c06cd9-c6f5-4730-92d0-8821e40a5be6", "value": "3072:xhhA0o20YPukHbCRfnRHRQvvTffSAmoz9nzBsNcPUTkFizT:N/PH0fn907fKAmoz9nzBsNcPUTkFizT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771472118, "uuid": "07c4704e-82fd-461a-be46-7fadab02fd8d", "value": 227640, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "8661f98c-14ad-4485-8422-b5f028dcabe1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1816b47e-ff15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771472118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "022c304d-ce36-409e-95b9-4c2d0d92f701", "comment": "Malware payload (Mirai)", "value": "f3329f856ba310af8f0d51b74428368e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "cee72785-92cd-4712-93ce-b6be3a221129", "comment": "Malware payload (Mirai)", "value": "b92b53b7558fd6d52fdf8ebc6424d99cfa9b4a41bf4289f4ccde63407b4846c5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "9c7fb55a-65f5-4628-863d-32a4c9280459", "value": "T1BD041993F905DEF6F40AE73204D30B257271BB520A531A36B21B797A9E3A2D43427F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "c91abe5d-566e-4369-9536-5abd1f2ada6b", "value": "3072:S87chsccgiqSgQqEHbT/sV2W/6SzcLvo2CylmOsuDs8n7mHknNarxtK76XWf8hi:OsAiqSgQPvsVELvQyljsnUmHknNarxt4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771472118, "uuid": "058ad4f9-fbc7-417b-a6f3-55070550b6a0", "value": 185576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "ce6fcbb3-ddea-49c6-84ce-4bcd1b693942", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "02d8a8e9-0d44-11f1-8369-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771472118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "20470ad4-4cec-45cb-8b9f-6ded7c99fa03", "comment": "Malware payload (Gafgyt)", "value": "2e3443b3adf77cfe8284af29e09ad860", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "cc6f8e6a-3870-4a9f-bd68-d77d35d120eb", "comment": "Malware payload (Gafgyt)", "value": "031ef3b088393e9dd620ae5ffafadfb886125da47fe3a57b1ff308a9b253ac9e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "dce2282f-c8eb-4b3f-888c-7bf69a75e952", "value": "T100042803759186FBC4D68FB41BEB95118933F8391B32620AB398FDA91F0DED86E1D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "88376f0c-c53d-433e-b05a-0a202b7f89c9", "value": "3072:b867ZLIEK/lRvGGzbJs4lpqppZVsDtaP+o9muan+wshqo0ENbfhhi:b8e8DWh8omuan+wshqo0ENbfhhi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771472118, "uuid": "c96c2c4a-c0ac-49c5-a802-2ec85457413e", "value": 182678, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "6050adcc-21de-4ae0-8c3e-1375ec8b9dc8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40520fd6-ff15-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1771472118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "6d54b6b7-227c-4fee-9d15-8c0825045fa9", "comment": "Malware payload (Gafgyt)", "value": "08204ffc3b391a6baf1fe88c78ca67c3", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "b9270bb6-3aa8-45d9-ba33-e068c14aeeff", "comment": "Malware payload (Gafgyt)", "value": "0e08712188a3dbaf6828ca455d05fb47a1610578fb1c41cc633c143b8db7147e", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "3cc4917d-327c-4aa8-a2a3-fcdec96634cc", "value": "T129E32953A8655FE7C196AFF521E34A750753FC114B4B0B8AB23AEAF402079CDB8097", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "fa3d19a8-a46e-4120-8a55-c592fd27de73", "value": "3072:HW0lLaXbxK2asipWjjJ6cjlo0Q3mlqaN7rx+v7MXWffhi:HW0lLaXl7e0jjDZoD3mlqaN7rx+v7MXj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771472118, "uuid": "f65aeee3-d731-448a-b6a6-651d5e4aeef3", "value": 154213, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "cede6db7-d46f-4e64-b0fd-6cd75442a99a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "17fd1995-ff15-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1771472118, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "baa632b5-eafc-4609-bd4a-21e1faad750a", "comment": "Malware payload", "value": "f6ab4e3118b9c9a8761aab775b51ad31", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "4a95e31f-b7d5-4570-8ba4-2cab455310a7", "comment": "Malware payload", "value": "2a1968db5991194243387184326897426729b929288a5ce3fe86714ef45cc8e0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "47d47a97-4a7f-48ee-b95f-72c6dc351bf2", "value": "T19324E7076BA19EF7C89BCD3302FA860120CEE05722956B6B7378D65CBB4A94F49D3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "9ebedabb-b0a8-4da8-b66a-7d41d443e08b", "value": "3072:kmkyo8Jbqa7jlSLUOdIkwXuIEz3moz9nzBsNcPUTkFizT:xkKP75zO+kw+h3moz9nzBsNcPUTkFizT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771472118, "uuid": "2b885048-56c8-4556-82f4-a61b58eb018d", "value": 227701, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472118, "uuid": "a06cda38-ea07-44c4-ade7-8d7925e66ff8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "943b4da8-06cb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771475345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771475345, "uuid": "16a8138d-e650-4350-a559-06cc88a5ef84", "comment": "Malware payload", "value": "6972ea93ab927a279d98240a0de6be0f", "object_relation": "md5", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771475345, "uuid": "8819b11b-fec1-41ae-97a4-b4c2a61bd4b6", "comment": "Malware payload", "value": "143a5b5c78fe71f2c0883a6a959937938b6288a15ac5cb031d35472b413a6c48", "object_relation": "sha256", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771475345, "uuid": "1a611f87-7bbc-45bf-9e05-1896996a9567", "value": "T1452523CC914A5C60ED2A8531FBC80FCA0D13534620BC9EED685596692BFFE64B501F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771475345, "uuid": "313d9c55-baf1-4b39-8eec-661425d33603", "value": "24576:grEgV6dABDNOjAl6Gu7NYReSjQNEwUi2sgQ27kBrLkw1NUWF5:gIgV6dABUmi6jzbi2lhuQSL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771475345, "uuid": "08c639d4-1818-45bd-96d6-fedec4a0363d", "value": 1044108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771475345, "uuid": "25ad9ea5-6077-4cbb-8bdd-b0b854550b92", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef1e0e03-0c99-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771477811, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771477811, "uuid": "67da48f2-2645-4126-8939-28b3f80106e1", "comment": "Malware payload", "value": "e699d32972229eadcf60fc1e25c0b6f0", "object_relation": "md5", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771477811, "uuid": "f2337fa1-221b-402b-8a4f-566f957aa565", "comment": "Malware payload", "value": "6b48a1703a107f55f85eb15d5daa8c429b7a7b80bd9abc28e5542ac02e9f5842", "object_relation": "sha256", "Tag": [ { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771477811, "uuid": "946844d5-78b6-4015-99c8-134536b044db", "value": "T17382A627CD049FF00D7EB3E16497A816CA624212BA347949B98DC5E97F33664DBCC0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771477811, "uuid": "f46006b3-dc16-4b5e-bd8d-8d7c2892207f", "value": "384:KwG58RhDqOCg11Lmw8ny+/GAHzqcW2lAG9MF4:KwG58PNL5gPzzWwAG9N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771477811, "uuid": "0d924f47-8235-4d90-99de-ace1f08ebf58", "value": 18922, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771477811, "uuid": "9a951a82-3374-472b-b880-21ab10c8f934", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1af561c6-0d55-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771479460, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479460, "uuid": "f6295ba6-e7ed-4350-879e-d7d8a1e914a5", "comment": "Malware payload (Mirai)", "value": "5398b89d848c721ed8d32dba876982db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479460, "uuid": "a48b689c-8c46-4e8d-85d2-0f79815dfe63", "comment": "Malware payload (Mirai)", "value": "677faac509d3aa85d86329e89c90088d53d837e96a1fcbaf4871914166f985d8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771479460, "uuid": "ed72cf52-3f0a-4c7f-9a04-b62095a82884", "value": "T13173024E77AF5FD8D7506EB827D5A38CA901478AB76502058ADD521EF4343B0EC085", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771479460, "uuid": "3530e0b9-52c5-462d-b46a-0f47bc7b0eff", "value": "1536:1RAW7+UVjhFiN9VqzbPnQks+2jhsK/5DPUmLHMXMMQorV7:1mW77BqNDqXQy29jDPUMHMXMMQSV7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771479460, "uuid": "09cb189e-8cd8-4513-b4a1-b2c4b518404a", "value": 76176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771479460, "uuid": "e80f6e75-8d95-4718-8ca6-7fd8876e12a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "772f9e09-0d56-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771480044, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771480044, "uuid": "ae82f351-53e9-48fd-9897-21727d629c85", "comment": "Malware payload", "value": "c9525509d8aedc0ee79850aec58d30e4", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771480044, "uuid": "e326cbaf-edea-493e-813c-7e2575871497", "comment": "Malware payload", "value": "8097abed989926e16bc60a9efcb6d81873531a08f614690e171c0563737a6c89", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771480044, "uuid": "8ed5b39d-d7c6-4976-8ef9-27e9d8a14da1", "value": "T1A846330820F9C18ED7997EBCF65F01C21546C1347E2ABD7EB93259C6D5C4CECA19B0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771480044, "uuid": "0e5db2ca-04b3-4d95-bc74-0744a6536335", "value": "98304:FmK5G94YNBrqOrArQMiH9OBNHG6DIh43yEi3AhKSPYIvaJZ:O9HNB2qZHkBtvI4IiTvaJZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771480044, "uuid": "201512a8-092c-4887-8730-c6acb7196994", "value": 5477422, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771480044, "uuid": "bebc6311-d3e8-4978-b4a2-85c0a3f4ecf7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "910094e3-0d59-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771481376, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481376, "uuid": "ffd73332-d54f-4b9c-a98a-92f8a5902848", "comment": "Malware payload (Mirai)", "value": "e1c36e0d03393418cb54812820803ccb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481376, "uuid": "0240c4bb-6542-4099-b39c-0d2dfdc28425", "comment": "Malware payload (Mirai)", "value": "ca0cd0a3739329808d9c51c93dbb7d220e9504b4e847a217074e95595d5e552f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481376, "uuid": "288be35b-119d-4bb5-b59f-d06a5438dfaf", "value": "T144B34A02B70E0F43D2632CF02B7B17E197DAFD9116B8A580612DBAC59374DF62186E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481376, "uuid": "61528f31-4d9a-4a4b-885f-7fe251eca13b", "value": "1536:DWlZFqCtbcFrv+t9rDRPKQL7svMh7KPNHlU/Az6kF92m30y/A9p39VeqLk9vpyy3:DWHJbyvqDdK5MMPNHLxrb0y49ds3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771481376, "uuid": "7e1154c5-e02e-4264-a754-ca146682d32c", "value": 118112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481376, "uuid": "f48693b2-3a66-46e5-8ae6-45cbb0bbc337", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "208244e5-0d5a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771481616, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481616, "uuid": "794b396c-0fd8-4cd0-998d-5004917d982a", "comment": "Malware payload (Mirai)", "value": "b2ad47f29bfb973f43827433b323f0ee", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481616, "uuid": "414646e7-534e-4668-b4cd-34e0bb914281", "comment": "Malware payload (Mirai)", "value": "e532c69410710788a8976cd50939ac423729cdd723650b213e0baac4c6623a4a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481616, "uuid": "01f478c7-9645-44a5-8ea5-db9b9fe9a7d2", "value": "T1D863126915FA7DDC9AFA376A444910CC0E3D726153CB80DA02DFA4ECD575DD88FA2C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481616, "uuid": "221dd514-350b-4e7b-aab0-23aa6d4a6bb8", "value": "1536:UMxE+v9BK3TqAdBWMqEVoV7W3Sbwifiq9CAeDAIvL6UtMtrP1:UJOg3TdwsomSbRiiCAeDR+HrP1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771481616, "uuid": "89ad73b6-9466-46a6-9bba-7c692ed69224", "value": 72132, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481616, "uuid": "bfd04564-5371-4305-8b3f-83124be9d100", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a87f21e-0d5a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771481633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481633, "uuid": "4ab9229d-89e9-48ac-bd71-700f17443fd1", "comment": "Malware payload (Mirai)", "value": "d6cfd86295684b46842722817e4c64f2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481633, "uuid": "8ec9d5ba-5e42-4b70-96b0-35d463ce6439", "comment": "Malware payload (Mirai)", "value": "c49a964df06ea699c6dbfd7db5d55c23ed042af7f03ebf700e4663f0a6dbbe66", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481633, "uuid": "2ce4d579-eb0d-4d1c-9226-111f431eb65a", "value": "T12B146D2BB3C39CD6D11063304C316362776FDB081958EAFFDA0B3794A997B625A246", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481633, "uuid": "7937457a-9412-4be0-b8b9-f01ce6d737e3", "value": "6144:EdJOm515xCNumRrQ/oMUybgq44Sx7IKTt5:wCNhs/PsPx7IQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771481633, "uuid": "43c58080-ac15-4768-b738-8aae5b543dfb", "value": 197352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481633, "uuid": "c4c5b81c-0b2e-4d86-af99-8fb43fc087c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f1d924c6-dfe8-11eb-bc10-fa163e7ea96e", "comment": "Malware payload", "timestamp": 1771481664, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481664, "uuid": "c532bafe-2640-48d5-bf4e-e2c253d2e5f7", "comment": "Malware payload", "value": "6b0fb88c187a6dbf48017f66f262edab", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481664, "uuid": "8b133398-345a-45b0-b1ad-303db63fd6c0", "comment": "Malware payload", "value": "ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481664, "uuid": "79b3f05a-d8cd-4b19-a355-81ba3b6155e5", "value": "B9D3128BEF368C1FDB002E7216DB4B9E6C6D395B41CBF4A8F9C1818F13A11C57952215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481664, "uuid": "6219feac-795d-44b6-ad4b-55bd4965d814", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioX:p3lOYoaja8xzx/0wsxzSi6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771481664, "uuid": "0b216940-e9f9-4696-8da6-a4b2fd8bc25c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481664, "uuid": "47e3851b-7a78-438b-8e0a-5aff953d7219", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74da36c9-0d5a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771481758, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481758, "uuid": "eb1c1933-2bf5-4464-9acd-58b5b05da731", "comment": "Malware payload (Mirai)", "value": "b05480148b958e0353233efaf756361e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481758, "uuid": "8ce9e129-f865-4b7c-9355-c578ac168b0f", "comment": "Malware payload (Mirai)", "value": "51631493f1bd313825ce2fea50c4c3a910d270558fcbcb40420d97afdbf855a7", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481758, "uuid": "4a55048d-8a7a-484d-a71b-cf117776c50d", "value": "T1A963026DA9397DDAED7836B53DDBAB54F42560598C8209008ADC039C3BED1AC1CDC8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481758, "uuid": "57d4a96f-58d5-4acb-932e-0d3c45123191", "value": "1536:LPgojAKsG+WPnloa99o/fhTx3d6So261lClRAJx+N2x:LPgWkIRsfphd6SojcRAJx+N2x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771481758, "uuid": "de48fe49-618d-4862-b2c1-cfcb7ad70897", "value": 71496, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481758, "uuid": "19a6b137-f76d-4f0f-a606-2db9e4162118", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "98991ea1-0d5a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771481818, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481818, "uuid": "792033fb-417a-45bd-8d0b-d0160c949330", "comment": "Malware payload (Mirai)", "value": "13728c9854fa201c43afccfc5788a4ea", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481818, "uuid": "92270997-bc25-4fd2-a8c3-f464491f9a3f", "comment": "Malware payload (Mirai)", "value": "8351ebf92972f95fd9303982116470bd229f01e2559848df60bb1e508b7af3b1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481818, "uuid": "03afa11b-6e1d-40e4-9fae-e23067488117", "value": "T11CC3F184FB22A991D0A306F9A4C04AC383606E76CFA313080299F678397DDFB1F65D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481818, "uuid": "f891020b-5e90-4f85-822f-95c7a4287c68", "value": "3072:4B9LzLeoodMoLnyXdOZmK7FqSgMCPgHaTRxXXMMTnI:0LzL2V2oVFqxMCZxHxTnI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771481818, "uuid": "43adc6cc-59ce-4cf2-948d-7c8ebd702d70", "value": 127816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481818, "uuid": "3add9b4a-1d9f-40f0-a03f-c2ecc4282472", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2398a29-0d5a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771481861, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481861, "uuid": "e41dbef3-fe47-4f0f-baea-0b1ff25eb73c", "comment": "Malware payload (Mirai)", "value": "8288abb9c1682d627ac797695a8025dd", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481861, "uuid": "b1870be5-4bc5-42d9-985e-8042c4acfdb2", "comment": "Malware payload (Mirai)", "value": "353c6f0cd8b4bdd69ee7b546ed9fc0f28a4f7a8f21095ec5b0f47702b48e1865", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481861, "uuid": "d1123726-21a8-4de3-9fa9-8f725c03c7dd", "value": "T183B3BF87A1A07ABEE0546D7FC413CE17F6259FB01D87172AA1BCF9905D393807293E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481861, "uuid": "3b06e0d7-141e-4e7d-8d8d-339dd220a2f5", "value": "1536:Yo9+x2Cgvxt0oDKi6M50Zf3fXDdQFDu9aVlr6BHSuBUyV/T5VOcGndYn3g8rSW:Ym+8pt0ougCXDdUDusit0yVZGnmwUSW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771481861, "uuid": "12538c73-8923-4b24-b976-628b43f60325", "value": 115116, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481861, "uuid": "6205ff52-9fbc-4768-9f02-8ecb9497749b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c53ce84c-0d5a-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771481893, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481893, "uuid": "1c877f14-e6c5-43ff-bd72-ac7f8d77aa4a", "comment": "Malware payload (Mirai)", "value": "80c700876bcc737c8df1b2c36b0945af", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481893, "uuid": "28aa69f3-f17b-47d1-8663-7267a4f41936", "comment": "Malware payload (Mirai)", "value": "d5756bf69724a1ee6baff284dbef17729e94c5ddb3209f2c3910a92f176cf762", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481893, "uuid": "215780ef-c2ca-45f8-9d31-bbb51ff94b7e", "value": "T1EFB3E148B614EA55C02772FCB14609C0E3B15EBB6BAA5A065063F5B46DBCCD03F07E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481893, "uuid": "b426e6f8-e946-478b-a820-a04f30aac9e1", "value": "1536:XFN7EZMO/s5G0jCRnI577NlM3yLoWJI+NMx75Oep7dZuJ8bkhj7S6ppupgwgF/lc:nkMOUCRSNlMUI+Gx75Nv28bO1uewui", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771481893, "uuid": "db78b6eb-6e1e-4853-a750-2a2ca4dab2e8", "value": 111776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481893, "uuid": "0e2b5bfe-7ac5-4e02-a780-aef4a9e2872d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "129134a9-0d5b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482022, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482022, "uuid": "10e5ff2e-c047-41ab-aa71-266982f39504", "comment": "Malware payload (Mirai)", "value": "10cd1f0636d42963e0d5086efa3b6ec8", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482022, "uuid": "53281ab7-ac64-41de-a78a-757ecb5ad22b", "comment": "Malware payload (Mirai)", "value": "f88260438ddfa1ccc64a02cf92e036dc8a4c8ef6c219effd3c8d66e466465422", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482022, "uuid": "b2cf2eec-7135-4862-bc8c-82c2ffa39dfa", "value": "T1D8D3295AB9529F11D5C335FAFAAE414933136FB8E3F97002DD206FA0238699B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482022, "uuid": "2a9579f8-e486-44af-ba63-1246621eb576", "value": "3072:wnBf8xdk7o7dI67w78D7abGfyQh6oaVMl9P555dAAru:gf8xdQoO67w87abGfyQh6VMlh5mAru", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482022, "uuid": "c54f6a92-d846-4846-aa50-10c62ebdec8a", "value": 140408, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482022, "uuid": "9b9879bd-dd8c-464b-8309-a98b4705a474", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "304b6a0b-0d5b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482072, "uuid": "1e9e9c33-7982-4ecd-80ae-8a05fe9ecab6", "comment": "Malware payload (Mirai)", "value": "bc73b2c34ea493a43a4af475d1e3b189", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482072, "uuid": "5237fa43-a3ed-4c5a-aa91-f231d404ca62", "comment": "Malware payload (Mirai)", "value": "3489463bbde761e4b1b1ad51a8c616cd3cb8fec026d740b8cb562f54bb753ac6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482072, "uuid": "f6ae8b32-a827-4a0d-b131-986e6256308c", "value": "T198157C9DEBC6E4F1F26340F1025EDBF71534A12A5013F6F6EB46266370327A1AF162", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482072, "uuid": "70cc00e0-84c1-4fee-ad16-d1af34ebf6bb", "value": "24576:dO82RzCW0EhR3hdbUyguvy/nwbXmuuaZ:32jHhR3hd46aefZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482072, "uuid": "9362e84c-149a-4e0d-9367-3bccb5f5058c", "value": 895576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482072, "uuid": "9839b1c6-8c49-4e0e-85e9-4436aeba6a04", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3b765b09-0d5b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482091, "uuid": "fe6c19f9-6e16-408d-831a-bac3d293ecb8", "comment": "Malware payload (Mirai)", "value": "86cf33f39d81a41b88d71659791fa5b5", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482091, "uuid": "1fbdbba0-ae67-4c8d-9698-754e629e9896", "comment": "Malware payload (Mirai)", "value": "9921100fc03f2e3bfe52266d43003e520c3d141823220c60bc137f4500da51f8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482091, "uuid": "aa32e10d-338b-4330-ac6f-c15829958947", "value": "T197D3D032E0056CA0CC111AB838775A7C1344DEB806E55283EFBFE5AE647BD9479EDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482091, "uuid": "f0027fa3-0fea-4554-9312-7cfc2525ee54", "value": "3072:ZUPvxhgOkU4Bj6QGZc7He7HMo2N7v9GBdqNO4gY3Z1:ZUPvxmLIciDMok8ngO4hp1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482091, "uuid": "48c18027-28d8-42ea-9a8b-99f204df3e65", "value": 131656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482091, "uuid": "adf6981e-0196-48ee-92a0-417875c753fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "911a410b-0d5b-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771482235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482235, "uuid": "25206a22-e3ee-42a1-b81d-4381aa318c46", "comment": "Malware payload (CoinMiner)", "value": "d398a497c076a5668d8479ae0bdd2462", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482235, "uuid": "9df368cd-a1c1-4a8e-bff3-2a80a5dd970b", "comment": "Malware payload (CoinMiner)", "value": "42300aeb61d966a20069eaae4e7efb4fe1f9c3eda7c63bc798ae54f3598eb473", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482235, "uuid": "5e500960-7e2e-4fed-bea8-8dc5006a748a", "value": "T1225633BBF1A0CE9AD616E9353226F48AF17AC14B87104FD056A4BE03C196FC771B47", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482235, "uuid": "e2da65af-9fc8-4e56-92ee-6680cd214677", "value": "98304:aydRc0v6VcERnAPGYU1Sga9RYMGzZwa7IeClHl2FTSGYuHinurRoSncMEOJaTMOv:ayf3vccEt+BGSga9RYM6rUgF2GxHigRe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482235, "uuid": "3ad9600a-086f-45d0-ab4d-47e4a8677510", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482235, "uuid": "c0bf2f8e-9a3d-4160-afd8-9d9f3a2beb57", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96d5d53b-0d5b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482244, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482244, "uuid": "bacbab0b-4768-4896-83f0-975177ac5e95", "comment": "Malware payload (Mirai)", "value": "18cd78f743e81252bd31ede23aa64984", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482244, "uuid": "f807c4a8-b75b-465d-8570-d2e9a3ddef4c", "comment": "Malware payload (Mirai)", "value": "c842f5d9ae99d308f9364ddcc4fe69031158d4ce9a10e910a3040d9089e89b5b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482244, "uuid": "12950289-d9a7-4c00-ab9a-03ddd367ae3e", "value": "T109530232D2D8F71FF15F213BCE6F407A41A772E6F00AC24F5A9458EDB629640E5269", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482244, "uuid": "15848c18-e2a6-43d1-bebe-e851c5534f95", "value": "1536:ZFaIEtmT/F8oxwadUEW407h1JZy7zg3P/CDF5cTXiTgwAQf:3zT/F0EW7i760ceUQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482244, "uuid": "5d567bb6-3304-4ca0-82a7-047e08b7c61a", "value": 65252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482244, "uuid": "cc6020c5-3874-4182-ae5b-621561c7f868", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d8a5bad7-0d5b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771482355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482355, "uuid": "a8d7c513-49b3-4e59-a11a-bc602b7bb6ba", "comment": "Malware payload", "value": "f04414e01f4241431cc70052d2ae46df", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482355, "uuid": "5119f17f-91ab-426f-98ce-8cfdc8d27e7f", "comment": "Malware payload", "value": "74897e98b69fb61fc18fdd9be3c9de60c3e11c537c723f18f3cee8a4ccd23fe3", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482355, "uuid": "2057ecf5-8b18-46c0-98d3-94065cb5b9db", "value": "T1865633227180D872E136503900F2D4EA34BDBDB75728A98B534D3779AD753E0337A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482355, "uuid": "c2bc502b-b35d-41b9-b3b2-e55c40b32181", "value": "98304:EUmC64zYrUJCUbjpsUr/cX2zEqkswFFErRoSncMEOJaTMOKXX+dd6XNuPBs/vrF:mmzYrUjjbr/XwF5+RH6OJAMp+P6kBsZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482355, "uuid": "b49782f6-e806-4b28-9a6b-ba9e759017ad", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482355, "uuid": "dfccf1f8-fc16-4cfe-8467-321c8e3cae14", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e1204259-0d5b-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482369, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482369, "uuid": "9292a9cd-f05d-4446-bdb1-8256a374bf60", "comment": "Malware payload (Mirai)", "value": "aafafdb027de087d7b37cd30e7ccf251", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482369, "uuid": "bc02c9f8-c2e5-4113-85b4-b48fc9c94d31", "comment": "Malware payload (Mirai)", "value": "1ab85a1a4d6694858dd7507e5095313643bb583c77f61e6b139c7f78f5909f1a", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482369, "uuid": "7c86d61f-b83f-459d-82b9-fc60e99da402", "value": "T147148060FA0663B1CC730A38679A2E5A6E7704159FEB26312D1F533DDE628509B31F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482369, "uuid": "d1edc0fb-d0c7-469f-bdd4-2c8bfe3c4dce", "value": "3072:8bX5sLSIxMftAvSWnewnKRp7b7s4kmyliGX2UKQ:83ttISser7sXmATl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482369, "uuid": "47810c05-07fa-495e-9da2-b91752363b29", "value": 205416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482369, "uuid": "aa357a7c-24a6-4d64-8322-98f5148f180e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2c8a6bd7-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482496, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482496, "uuid": "ad4948e7-46b7-40b6-a190-3dc99e596430", "comment": "Malware payload (Mirai)", "value": "d3599a1052ebc2a0c2bcdd2732b9af64", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482496, "uuid": "dbdc5995-ed89-4aa4-b704-9a01db0a9da7", "comment": "Malware payload (Mirai)", "value": "f09594020089636d66419d488f6791047f6989e35036a500a8eea2ea8070cbfb", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482496, "uuid": "61d9a26b-9693-47a1-a43d-444cc70cf3c3", "value": "T185E47D9DFE4E3C42E2D7E2789E4D87E1721775E4D32391A33982430CD5CAAE98BB15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482496, "uuid": "044256a3-32e7-4ef8-969d-2f004c5c8418", "value": "12288:afGYkTPOO2NYMnMkQCJ4WxG/pem/qzOH/X2natCTZyw5zSUlaugBv:oGZ12NYzyG/pt/wOhEykau", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482496, "uuid": "48174201-facf-4357-bec4-a7229a126414", "value": 674784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482496, "uuid": "c39535c6-a270-4d15-9c60-f1a36c646467", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "38687de1-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482515, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482515, "uuid": "be1391a3-1ac6-453a-8468-5bbf66171e01", "comment": "Malware payload (Mirai)", "value": "d4b10bde99f4d27170168a2dd725b911", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482515, "uuid": "ead5eb60-ea53-4256-b00a-8e3a7f7dee30", "comment": "Malware payload (Mirai)", "value": "c5d731eb806c636ec059435137148fcd58bd6749a3f1616078b795596331bafc", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482515, "uuid": "7c070277-c62b-49e2-abf9-b1f122eb57f7", "value": "T1507302AEF562BFF8CB53993CCAF5115CA1E3866A81E113C83887619939C44209FC69", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482515, "uuid": "97833f7f-00b8-4c8c-b6ad-54839fcfa18f", "value": "1536:MZ0Zv1fb/Ylw0z26KWUReLIVlC+D8tsYnJLltsAgOM2ddorM7:MZafbL30MeLTtDLltsTOBddSM7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482515, "uuid": "fb8c30db-5aa8-4742-a892-1b61ddc68338", "value": 75804, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482515, "uuid": "96fd20bd-bb39-49a0-9ad7-245c6863d3c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ecc2259-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482526, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482526, "uuid": "a301719c-1009-4ac2-866f-3e1cc837c4e1", "comment": "Malware payload (Mirai)", "value": "982114268a8c333570051b171a550c91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482526, "uuid": "efe06f2c-9d8d-4261-b265-9e2f7f821c81", "comment": "Malware payload (Mirai)", "value": "cb770312983dcc409bf5963e1fb5f3755db312a7e8f3bf64e11e08ad1aa55336", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482526, "uuid": "12903011-4e28-4672-bd25-0f1d51cbe489", "value": "T174143C537B224FA0D365C5720BB38B1A5DEB15411EE298D5932CCB103E20AE96C9BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482526, "uuid": "df4aad9f-aaf4-4f20-9601-e51bac9b09e5", "value": "3072:JMgrk+4HHTNYlvWBfb/3MwrM+gs7YplbC3qWQ1tpr:FrfIHTNf78wrMHs03C013", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482526, "uuid": "9b9496d9-5d30-4564-8242-a0744fc2e4bb", "value": 197612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482526, "uuid": "3761edaa-a9c7-4301-9c82-ca607370a6af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4c9b9a56-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771482549, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482549, "uuid": "f5c70ca5-c2d5-4f28-9872-8e47bf5e0fde", "comment": "Malware payload", "value": "1beeac8f3f05e18b14051dc1b5772ef1", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: bluys", "colour": "#d0fede", "exportable": true, "hide_tag": false }, { "name": "pw-bluys", "colour": "#5a7771", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482549, "uuid": "d88720e3-f146-4b36-aa52-a01900de4aab", "comment": "Malware payload", "value": "ab52f189d5dd305b8810e248f148042579442cb8dc3807e54fa171697e2aeefc", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: bluys", "colour": "#d0fede", "exportable": true, "hide_tag": false }, { "name": "pw-bluys", "colour": "#5a7771", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482549, "uuid": "e3c92618-36d9-4090-842d-e53f6655b895", "value": "T1AF1633934AF71B0CFA897FBB21861297E4FB055D6518E14B4FA6C8C10786FEB6C720", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482549, "uuid": "f1fee229-f4bc-4e2a-b813-bc9676eca674", "value": "98304:K5HIN0fmIijQRu4oqb4pAvJKAyn6ZbPaMvVsu:K5H+giUQ4FDW6NPa41", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482549, "uuid": "ff67c30c-fd07-417f-9ef0-79eb39641ed3", "value": 4183199, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482549, "uuid": "ebabd3bc-fac1-482a-9206-bd9618ba41e4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4ce94982-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771482550, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482550, "uuid": "56c3787e-56ab-406c-9108-21942e4e50a9", "comment": "Malware payload", "value": "7792271e1b1ead4f4e42d1678c40fb46", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "fake-git", "colour": "#bdb17a", "exportable": true, "hide_tag": false }, { "name": "FakeCheat", "colour": "#af27c1", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482550, "uuid": "1dba476d-f384-4358-a377-6f03bc95004d", "comment": "Malware payload", "value": "888767479d976813f4bf7568bb4a3748b15ebf8afcda2c9125ac41500c9e5811", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "fake-git", "colour": "#bdb17a", "exportable": true, "hide_tag": false }, { "name": "FakeCheat", "colour": "#af27c1", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482550, "uuid": "acde2ef2-ae6e-402c-9f50-24f25319aa5a", "value": "T182673390EB6A165BC63DF97253C41A277208251D679CF7699F9832C0EC043E67E239", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482550, "uuid": "370b8c98-5374-4b20-8f6d-f701adbb8914", "value": "786432:KixWYPPdOwXMdRMqKIGxqaY5prA1mlD+h0htffJu:KcWOVOc2RJppprA06UJu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482550, "uuid": "583cdc3f-af82-469a-9c60-13a30b15c633", "value": 30172325, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482550, "uuid": "33d02652-9457-438a-a1e8-95f24791b14d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5a46ad7c-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771482572, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482572, "uuid": "3635b88e-737a-4889-acbf-077c97330e56", "comment": "Malware payload", "value": "c652d87368fb7830cd02553fa3f9a208", "object_relation": "md5", "Tag": [ { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false }, { "name": "Wacatac", "colour": "#189036", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482572, "uuid": "1e5d3f2c-309c-4197-8728-0bcd8a9b6e22", "comment": "Malware payload", "value": "0755b0af8607b97efbabdb5c3ed5794acf8968b9d7f851833f86f4d37401fbce", "object_relation": "sha256", "Tag": [ { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false }, { "name": "Wacatac", "colour": "#189036", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482572, "uuid": "92d9714b-d42b-4135-8cc6-e67082e13bad", "value": "T1A62833A1AE030542A55AACE5ED9F8931C296152EDB1C0747D520AC3FF3FD30A6E8F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482572, "uuid": "45beb8a7-c4ac-4cf0-80bc-0fc5d8e68685", "value": "1572864:MbaOdeeuYkRhEOyLDxFca27cTQMN7d+boHQGpMmI3tg7XpUPntQvN68NOL4f3B:M+VeGhQX3z2Mt7db1I3a7ss6DLkR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482572, "uuid": "da7b21d1-b862-4343-be3c-afbd1407aeaa", "value": 93699267, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482572, "uuid": "ca330e3a-888a-4af5-aa09-c6bc17e84170", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5d7d1d52-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771482578, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482578, "uuid": "340575a4-2c53-4cbf-a200-39ebe041796b", "comment": "Malware payload", "value": "e647b0d665fd69df9117c4bb7370f283", "object_relation": "md5", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Etset!rfn", "colour": "#d21580", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482578, "uuid": "32f12a29-1d0e-4498-8be6-e5b69bb0c670", "comment": "Malware payload", "value": "4668dce2e181760d7819d351fdad7fb821e30983f87f54df2d3c190c93ccc564", "object_relation": "sha256", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Etset!rfn", "colour": "#d21580", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482578, "uuid": "0fff307d-6c73-4765-b7ea-73974764db4a", "value": "T13707330D68FDE7D82729908C37136D1A7C5BA34AB3BC9144E3BDF201992C7E276219", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482578, "uuid": "06a644b4-962f-4b12-bff3-1df435d064af", "value": "393216:b0wfZF4Rhxy455BABcivLEBfnxsHaFBp4m20b2UR/t8WA/:b0wfHgzVjxivL6nO6FQ0b/JtlK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482578, "uuid": "66f5f37a-4e88-404b-852e-923b555ca7cb", "value": 17729843, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482578, "uuid": "5d239bc9-0279-48be-a615-05c088e018f0", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7656b79f-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482619, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482619, "uuid": "20db78b6-a7d9-4024-9b40-9c2aaf78ed21", "comment": "Malware payload (Mirai)", "value": "50ff9035f1bd84f46645de750037920e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482619, "uuid": "c18c759c-740c-4706-a0b8-7ae22d5e1734", "comment": "Malware payload (Mirai)", "value": "f1907adb392eeec9b55ad4528cb0a72438e53dd3f61d963d1b7df653b3c08117", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482619, "uuid": "98e0ea93-af9c-4b77-93ba-71639ce53270", "value": "T1BF057C4BB2A374FDC157C43443ABC9B3A935B43542226E7B65C8DA303E16E701B1AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482619, "uuid": "912a2bbe-4d3d-4f0f-b0fd-33a68889fc4e", "value": "12288:KeEy4WWawlD4s50D/tkYiG+W9sv1tv51JtU6u6QWw0+h8bdzuF+4Jykfrm8qfHX:UVP4sukYiRPdth1JtBQS+Wmm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482619, "uuid": "cff57680-1e88-48cc-bf5f-c6a98f6dd701", "value": 863752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482619, "uuid": "9184b6ee-9f20-43f0-a247-ac17a76c1fcc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "790afe95-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482624, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482624, "uuid": "be5f9cb9-8f2c-437c-bfb4-056a7326c7fe", "comment": "Malware payload (Mirai)", "value": "7be76bd83605a0e59fd17c43fbe3a63d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482624, "uuid": "2a115766-9681-4084-842c-1df73b06c019", "comment": "Malware payload (Mirai)", "value": "94bc1f19bef7fad473aa0324c6fad470554bcdd1dd54b67b6315cec73dd08cfb", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482624, "uuid": "418b8f90-064c-4a0c-a099-66f054d816f8", "value": "T17021E28396227D793CC9415DA6AB405A6046432F056B7FA874969D772F0C540F174B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482624, "uuid": "af2e7bd6-5034-449b-88dc-ae6593649fbf", "value": "24:VUeYj+H1IDMK9CFdYhEnHQBYdm+oWdkWRIXaMY29I5RwARi93ADQZaZl1cSRs/:VUeYj+H1IDMK9CnYhEvR2WRIqMNmwuiT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482624, "uuid": "3498f18b-4974-462c-93e7-4632abc2f952", "value": 1247, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482624, "uuid": "1cf7eef0-0f18-4ef0-aab3-3297e5ff8002", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "914088d1-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771482665, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482665, "uuid": "e59cea5c-0689-40fd-91e0-39622f813987", "comment": "Malware payload", "value": "26344036d42b3181d15da0b5659d128b", "object_relation": "md5", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482665, "uuid": "0db86a9e-3deb-4e01-b75d-f1f0d00401be", "comment": "Malware payload", "value": "16b7de880bb4dac770002877a97e79710d79c4506d1456993399412c81d1900e", "object_relation": "sha256", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482665, "uuid": "e4499b21-5c6f-461f-8d30-2a87b6c3cf3b", "value": "T13B1833C6BAA6901DF275C5B2729B021EDC15D0D28D26DAB5C46F4A10F0E2E4BBBD3F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482665, "uuid": "0456370f-0d41-4015-a925-13b3ddf8a271", "value": "1572864:cXJe9vns+UeIxcSkyJ4xFFr4qetMdI7OgVgbnN7VKaW9AlT5xBOaAUcvq:uepns+UPxp1J4xF14+dIynNRU9ANBOap", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482665, "uuid": "d5e5f72a-7259-46f3-afd9-6ce6f82f6e9e", "value": 90400507, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482665, "uuid": "15dc8ef4-cbdd-4131-9cff-c855ac130888", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9446566b-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771482670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482670, "uuid": "a6bd51e4-ef1d-435e-ba74-f6369d0b6c2f", "comment": "Malware payload (CoinMiner)", "value": "96548d5c9c81b47a6347f170d7eec4cb", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482670, "uuid": "6037399a-8793-4611-af54-b0dba36d46eb", "comment": "Malware payload (CoinMiner)", "value": "d96d8f4f3bc61126be2d5781892ac2f6e39e3eef3054c40b14a2bce3b57f0e83", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482670, "uuid": "59fe8c7d-edb3-4c80-ae3e-e7253a7f8fea", "value": "T1FC31AC8297227E783CC561DDB1AA4499A045826F15BB2FB4B4C99EF62F0C440F278F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482670, "uuid": "f3b3402a-bede-4a40-9779-124e86ac40b9", "value": "24:VUeYj+H1TDMK9CFdYhEnHQ6Yc60mW+nl72tZ9HX9I59n5RiQZaZl1cSRs/:VUeYj+H1TDMK9CnYhEMU3lXMnPvjSu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482670, "uuid": "d1ddb1e7-c675-44ea-a506-ca814a9a2638", "value": 1444, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482670, "uuid": "65e33e0f-79e3-4392-bd9d-57cc8e00816f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dc08de35-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771482790, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482790, "uuid": "d985140f-cd4a-49e6-af02-2dbf9f24e90f", "comment": "Malware payload (Mirai)", "value": "e65957e9ca5829a2b261c147fbfd4409", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482790, "uuid": "09cf4f78-5f3f-4e38-a03a-c1f9fdbdab0d", "comment": "Malware payload (Mirai)", "value": "33f8079aa04508c27d37ce487d774cc9ce83987837dc19efd4029d10311e5d0d", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482790, "uuid": "fc8e98ce-c18b-44cc-9dfc-588b50feb346", "value": "T1E4B31952BE429B13C5C356F7F7AE42583B136B7CD7EA3102DD207FA0278A8DA0E265", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482790, "uuid": "baf2e81b-7ee1-4b49-98fc-78a60aecaa05", "value": "1536:nlGXJ1+6wdBkIvoT7UjzKkVha/3rvfdnRH6l+SgL3+vO+OOM4mwKCdWNbTHx/1:lU+6OzvadshaTfV56l+Sg6Wxpx/1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771482790, "uuid": "a4fdf98d-6cfc-4932-a82a-395db2ecfe9d", "value": 115756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482790, "uuid": "2e5435e9-8b9f-4b48-a260-3dc97bbe9f7e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cf999dd-0d5d-11f1-8369-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771483114, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483114, "uuid": "db03ca18-66c2-40f3-8798-65f06137f136", "comment": "Malware payload (CoinMiner)", "value": "55bb953007c8585774d3d6f55d22984b", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483114, "uuid": "d189f964-0cbb-4e1b-bf03-f3b4ff27f744", "comment": "Malware payload (CoinMiner)", "value": "95fbebae43a8f3771292d31b5f14bbfab9b9321c4efb6a0d29a030ce7420d134", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483114, "uuid": "4867235e-e400-4bce-adaf-4451af83188b", "value": "T1E9563362F440E432E038203925F684A5B07DFD7387644A8B73A93A364D793D936BDB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483114, "uuid": "2b2c5912-cf4f-4ec8-870c-9aa5912434cb", "value": "98304:EUmC6pOfTFU00bm8FmHptFErRoSncMEOJaTMOKXX+dAnsvxXe+:mWfTFU3msRH6OJAMp+ysk+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771483114, "uuid": "9b518985-7251-4e7c-a92e-e145ce0bda17", "value": 6271176, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483114, "uuid": "ac0980b0-8a8f-4ee3-bcb7-09c2f360e52d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc8f5449-0d5d-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771483274, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483274, "uuid": "0f977a93-07cc-44ff-80f5-0a55d43ce2e1", "comment": "Malware payload (Mirai)", "value": "53448f4dbd4b0c562581aaa4b14c42f2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483274, "uuid": "f4ce18e4-077a-474b-a295-4d072ae4847b", "comment": "Malware payload (Mirai)", "value": "1ee7e31f927a4a9a5341b3f1a5b9544f88a68197949bae2409a41df883eca957", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483274, "uuid": "f0c87b5a-df95-4dda-bf25-f58126def5d0", "value": "T16204392F358191F0FA411B746BCBD3976C290BBF519990DF6B416329B6E0B7BA02C4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483274, "uuid": "cbedeb35-71b2-42d1-97c0-c59f320e6168", "value": "3072:XsYcnTjVnSJkW26nE50YNnLBp+RR6zgOKNAHIm/NIp1QKq55eWUX3:XsdTMTES0nLk4ncoFIkKq5MjH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771483274, "uuid": "e6e6856f-c3c0-4258-8421-57178415d9f8", "value": 180808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483274, "uuid": "3c415fd8-8886-47a8-8670-2f7b56e88c13", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7171c755-0d5e-11f1-8369-82aee05be84a", "comment": "Malware payload (GCleaner)", "timestamp": 1771483470, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483470, "uuid": "c8f92bb7-5716-4094-bee7-8ea9f268c016", "comment": "Malware payload (GCleaner)", "value": "c3631fabc0211c1fe2a4840f5af43b8b", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483470, "uuid": "e70cb742-ee27-408b-8ab7-ea144fd24d26", "comment": "Malware payload (GCleaner)", "value": "29fc39ed5d7beb9b166ceb21c68a1152c684f994b9b9c1083a20bd17108da1be", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "gcleaner", "colour": "#23a1c3", "exportable": true, "hide_tag": false }, { "name": "Tofsee", "colour": "#baa077", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483470, "uuid": "e44a512e-e822-4b65-95ee-c5e0ec8564ef", "value": "T165E49E21F2D08433E1235E3CDD5792AD9E3DBED02D28585A3AEA1DCD9F3978178252", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483470, "uuid": "fbb8d367-5486-4769-aae8-923c3e4a9890", "value": "c475b6e242f56325f64c2b76233f720b", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483470, "uuid": "01e00f16-cf2f-4e9b-88db-3fbd8c974e86", "value": "12288:iQ8mJu5T0Ns+MD77lUjVM2oke6kpMePEGeMagGMX6/9:rJFNhu7lKNokhkyeP1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771483470, "uuid": "07a3b38a-125a-4bec-b0c0-75c1b64684a1", "value": 693248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483470, "uuid": "b92a4cb2-599d-4561-a614-4da985029491", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af8c8f18-0d5e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771483574, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483574, "uuid": "f69898e3-3e4f-4974-8835-45f24c7d32f7", "comment": "Malware payload (Mirai)", "value": "d8b0499ab9aead2ea0006f65ca150aeb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483574, "uuid": "9bccfc27-5de1-4c28-8fe8-664119091b36", "comment": "Malware payload (Mirai)", "value": "2f1c1807d411da9332f13b6a2cb33ac534f00d656f9758b9704db4b298897fb9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483574, "uuid": "a383ea0e-7567-408c-9aab-f80a693e8714", "value": "T163145C47EE890ECAC457CEB046FE83AB1EE7559B49D1F1F4443CCC1C395D29A4AA36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483574, "uuid": "6ec61a0a-f1fc-4d81-b16e-297cabdf8d08", "value": "3072:EZon8uO2w8WeiGnm8kC3IPGSsazsuP1ibU8/DPpxAP5Hf8fSsUBNGq/:/8/L8GqYVzF1ibU2PpxY5UpUBNGq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771483574, "uuid": "32413b7d-02ff-453a-a576-3e7de7caa224", "value": 201712, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483574, "uuid": "9795c7f9-0fb0-42dc-a65c-6bfa25878e5c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32a7f96d-0d5f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771483794, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483794, "uuid": "e4c64ff7-7eb0-41b2-b6d6-5dd2b3c7bde7", "comment": "Malware payload (Mirai)", "value": "1398aba22dcfa5b291888ac4e5ed4c4b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483794, "uuid": "febecf43-616f-4895-a50f-d9281ca3e5a6", "comment": "Malware payload (Mirai)", "value": "85d84e358cadd9d7e099769e126ba16e16f9b080769d525144f58b2804096281", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483794, "uuid": "0511f309-39f5-42c3-8315-5c0ba5166cf2", "value": "T18ED3D021E5005DA1DC221AB938BA86BC0710EF7407D652C6FFFFE95A6477DD434AE2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483794, "uuid": "1b54204e-fae4-4441-825b-cf0cf9d9e04b", "value": "3072:qTivk3dUGX3ymeU4DVcQ8xrmfHD7qoYhQAPBr:qes7CmeU4RlL7zYhxB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771483794, "uuid": "14a98465-6146-4969-963c-2ca8d5dff909", "value": 131664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483794, "uuid": "2ea31426-ef58-406c-b87e-12c20f1e6020", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0de7db58-f09b-11f0-8990-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771484059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484059, "uuid": "e6a915d9-1f50-4781-98c0-d5379da54e72", "comment": "Malware payload (Mirai)", "value": "0c3961bac90a3ae8051cedd6c0ab1143", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484059, "uuid": "bde595af-d160-43b2-9287-4b82051843b9", "comment": "Malware payload (Mirai)", "value": "0c4bfa96b30bf3046a70d8a0143ed419a7cd58b55091c85da619a8a22cd31e1b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484059, "uuid": "b295d701-01ac-45c6-83e0-c7520f09d1dc", "value": "T194767C99FD0E3841F3CAE27CDE4A97E1B62B75A0D32780F37E92524CC59A6D4C6B15", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484059, "uuid": "81ec509b-3653-4fcf-8b09-ef39715eed2b", "value": "98304:IB2FSpFA3Hvf+nMwX+CoM/Wdc5Gbz+2OqwbWiHP+yHqazWbY:1SGHvfpdQWdc5Gbz+2OqJUP+M/qb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771484059, "uuid": "2d0d4d1d-e0d0-47f4-83d1-0dc334ce63b1", "value": 7502504, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484059, "uuid": "ab89b410-ec03-465a-92b7-a943e7e01f7d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d035fc5f-0d5f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771484059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484059, "uuid": "a2cab239-c308-4eb6-9758-ae250e362c08", "comment": "Malware payload (Mirai)", "value": "fa7b9468bddeabf751d23ac30f8dc745", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484059, "uuid": "202ca42f-f3ee-4441-a35c-b9d6259fe9aa", "comment": "Malware payload (Mirai)", "value": "61db062f3ef27695b80c6bb8ceebe96b5dbe0872fa0e635b79108cd1d7c52628", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484059, "uuid": "6e60ce33-3aa1-4c2d-a258-fbef80bbaa86", "value": "T135964B37B6A285DCC08BE1746A9FD5F3F920B4F40221206B27965A367F36E900F6D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484059, "uuid": "f85062b4-97cd-4edf-a5af-ac53a913d377", "value": "196608:sNlusYpHZPaU8ZlgoHOdWPV8ZUIh/KrUb+Hs:sNlu/xaU299Ih/KrR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771484059, "uuid": "a792d7c7-4705-4a02-9708-881b92eae30a", "value": 9430488, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484059, "uuid": "b26cd8f9-c120-4090-b202-9aee52b31240", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9e77868-0d5f-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771484129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484129, "uuid": "5d0a72b6-d01f-414c-b977-c1caa92b512e", "comment": "Malware payload (Mirai)", "value": "6203c3d0e4ae8fa248427970d62e0e7d", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484129, "uuid": "444a2e15-78c7-4f5d-82c7-786b0a86c48a", "comment": "Malware payload (Mirai)", "value": "109227d0de65cd2d0170295e729a57973642ea7a35deb6af8c5b85a703d0719b", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484129, "uuid": "b297b247-6e2f-4ac9-a8d5-11b481cebdf5", "value": "T177B31A56BE82DF13C5C311F7BBAE42583B136B6CD6EA3102ED247FA123864DA0E275", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484129, "uuid": "e364135e-efaf-4853-bba3-71ffb1933b5d", "value": "1536:ec/1V/EbQm82QGOcJfkf3qlLvTJdqdRl/I890qqzHv8OEid3NaevSlQBIyTgNC+/:F9V/U5d+3qrIdrA890quLa3W+/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771484129, "uuid": "da98f62e-5265-49bc-b6b5-0e2ba61869aa", "value": 113576, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484129, "uuid": "1089c8a9-3e53-42d5-89d1-a84619b9c361", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0d05e590-0d60-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771484161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484161, "uuid": "90eb8be7-11d2-4cc8-983c-da8cbf32c1e8", "comment": "Malware payload", "value": "6fd491a5936e696a3c4ac8f548231cb3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484161, "uuid": "f984b9f5-a451-4886-b8d5-341726a191e3", "comment": "Malware payload", "value": "cd1703d5242c6cd2420ba564376f822366b52ea296d1bb005075c9b198a16501", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484161, "uuid": "5101ae1c-0c0b-4901-b4ff-3d0671aea892", "value": "T1DC83D60AAFB12EBBD4AFDD3345A60749389D550621B57F3A3A74D81CF20A64B15E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484161, "uuid": "0d3a234c-80ec-4e34-97a3-157b62a90412", "value": "1536:323Ycve6ucgOn5/iGoToGXIv3SP0ERqJYCZRb5s812MHN+L8p9cIrZfqFX39wu7t:3ChIoGa7/IXAU2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771484161, "uuid": "2ca3a3cb-5f0f-4f58-914d-6865b2ed6d32", "value": 88396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484161, "uuid": "3bec0b3c-d621-4e94-8b0d-dfa4711e0ad9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1a22bddd-0d61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771484612, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484612, "uuid": "cbe66bf9-bd22-436f-9b0a-3611dd663d01", "comment": "Malware payload (Mirai)", "value": "fc76d82bc03f5ce08e713072c33a460b", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484612, "uuid": "3224f629-1d89-4616-8fd4-66328fb4ba12", "comment": "Malware payload (Mirai)", "value": "a67d5d7e45774458721fe852c65ab9e772ebd98a26a4ac7ddfbd059bc452710a", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484612, "uuid": "9d2462b7-d9ff-4979-92b7-5de74ad45bb6", "value": "T1BCC32A57B992DB11D5C311BAFAAE524933132FB8E3ED7202CD206F6067464EB0E7B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484612, "uuid": "9a2b7816-2af2-471f-b538-590688676f01", "value": "3072:ryjI+MsFeg1HLLqeSEj43lZFpafs+uPi4r1rlpVX:KI+MsrLLYEj4VZ7ak04rTpVX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771484612, "uuid": "d3bb8fe0-c885-4494-b68b-90841a45a797", "value": 125976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484612, "uuid": "56a1a939-c1dc-42e1-87ee-3d1fdc386980", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96e8ae94-0d61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771484822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484822, "uuid": "46c8e0ea-d6e3-40a7-8b35-685b27f4d731", "comment": "Malware payload (Mirai)", "value": "cffff0155bc089cafa559fb675121435", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484822, "uuid": "12f64860-8f20-4ff1-a369-a5699599ba24", "comment": "Malware payload (Mirai)", "value": "0215ba1fe7485c018716da20007e3ff77dd7ba8e57e1bce08d80f2a90f70a74d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484822, "uuid": "88017a47-ad0f-49fe-8f58-835c90e09967", "value": "T17DE3C60AAF610FBBDCABDC7702F90B5125CCB85715A93B757574E818B60A1CB0AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484822, "uuid": "d0ccb4ad-9689-457e-8a55-8ab83f1ed4eb", "value": "1536:uZeuQVqPCobtvIONd+E0W1kj7GGHqOuekdfjCtsHlITzQZYG9vLZbPDnaDAQEUov:x6tvRNhrkj7OjGsHoQz9FA5f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771484822, "uuid": "38594688-ed9e-4104-9c6e-ef05b680acc6", "value": 152988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484822, "uuid": "f14e1d68-4684-423a-90a2-e5ea9a6797e8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fba12abb-0d61-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771484990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484990, "uuid": "fcba55a6-e503-41c7-b2fd-4c1523c20e78", "comment": "Malware payload (Mirai)", "value": "ae565f3a90a40298983640683069d193", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484990, "uuid": "6017b500-fa4c-43b9-aa0f-077ec4deea81", "comment": "Malware payload (Mirai)", "value": "72a09f402cb1a967cbdd10f3fe48e9dc25c1747dbcbbbd604afa58e7f447ca4d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484990, "uuid": "e827a5ff-9d53-4ea4-b729-f35d45b4eb90", "value": "T1FB5302B026D2EB66E0971F73433A9EC34CDBA80AF2615BF1119254E64443969FF6C0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484990, "uuid": "09667e21-e1d6-441f-aec2-8f70dc59e0b3", "value": "1536:H9u9PHRRj0TTJ4kh4Lz5sLhqdg2ILkg4azHKP:H9gxx885sLhqdgnLGazHKP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771484990, "uuid": "af008537-25be-4014-8c90-f0e2508f9d2c", "value": 61596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484990, "uuid": "f8fac53c-d820-46da-984f-30849b61715b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b7a41537-0d63-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771485735, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771485735, "uuid": "db60f44d-8c42-4b6e-850d-42d09ef9e668", "comment": "Malware payload (Mirai)", "value": "5271ed04f4bf500f4fecc94e38d9344e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771485735, "uuid": "085b1d25-0430-4ad2-95b3-5a2bb9f41c20", "comment": "Malware payload (Mirai)", "value": "2053ece66644c5641208ca75d47e9ecf78ccc71b7edfcc15cee7e49579f7fc1d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771485735, "uuid": "10733d28-1c36-493d-83db-c2f72c21a7fa", "value": "T1B5E3860E6E228F6EF769C77143F78E30975977D61AE1C684E16CE5401E602CE241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771485735, "uuid": "4812bfc6-0de2-4d59-a7b7-10de53404f45", "value": "3072:QpKag1xg4/pUKSoV9ykRZQhRDaLF+5mf6qlL/:QpKL1xz3TNg3ap+5LcL/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771485735, "uuid": "558307cc-1a44-4a7e-8f7c-b3402eb8221d", "value": 152988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771485735, "uuid": "413b008b-6d01-480d-85d2-78cb3e39eb90", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6e5d47e-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "324a6c13-b9fd-4c36-ad29-74f243c36d37", "comment": "Malware payload (Mirai)", "value": "846bdeea05cbb3eb9b96558d4994a3bd", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "b929920b-984b-42c3-90fd-35a793cbedfe", "comment": "Malware payload (Mirai)", "value": "842cdfad1575afe94df47fd6b5004ca3b93c1bb96c6f4b7ac141faf4e5897c0a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "01dba6a4-9bc2-48b3-a0a8-534d6f5cc96a", "value": "T1D9C2E1A44B8D65E5C6E06F39F87E8287A2B017F0D4BE34743320D76996C290767F64", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "7ed483e9-cd00-47a1-beab-122f6de929cf", "value": "768:tXxs0kuOZHC0uSmYtBEWm1FS5MuVs3UozNk3:FxstZiimYtu1DoM5zS3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486336, "uuid": "e7139122-9244-4609-93f3-1f629e8d8aee", "value": 26264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "33d40310-5276-4434-a6b8-77421d7a4be2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f88564eb-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "71128091-7b94-4cd1-8b74-6696627b225b", "comment": "Malware payload (Mirai)", "value": "ad4c322ab2465820f866438d62c0543b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "6d9fd036-5437-4c0b-a872-3010fa10b593", "comment": "Malware payload (Mirai)", "value": "017adac4165af4bfebbec8fa8bac277b9571da71954df22457fe1fbab4985148", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "c2ef0c56-eb57-4016-93e5-238590e6b52e", "value": "T15A839DBBE42A5E20D14589B034F49E711F63A6C082932FBB6AE587786087C9CF505F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "9b4c8e51-7821-4b80-b126-fd820d75479d", "value": "1536:naYoNhC++/CHaoR+w3WOlwu4oKpmLm7lFY0UCKUnT6puUP:nKQn/C6An3WO+u4PpzrY0USnWoUP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486336, "uuid": "da1a4984-4c65-4bfe-91bc-2dec1c7f5f02", "value": 84516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "a3c4f3c6-a697-496b-b8b3-d8ae23a1e3dc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6ee9493-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "34b33422-1376-465e-a4f9-cb11ac18b365", "comment": "Malware payload (Mirai)", "value": "4ba01c00e9e1d3fe0290b9031a52f439", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "da4e3772-ea2c-4235-b196-f78aa5c95c6f", "comment": "Malware payload (Mirai)", "value": "bc73c5e109795ffe89be501a9a27ed49ff7a106d7f04d7fc1119a69b54ab9304", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "cc4a8cc1-d3d4-4514-9d6a-b1986c22b6f1", "value": "T1C713F15C1028F7B5C28268FDE93658E19B221F75F6B372BA13F6082D3A55E05637D0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "0c420589-61fa-4cb5-8290-d4b56b9ef992", "value": "768:K2AtaJ2XHMI4NscqzpTf1nAXG43x85nw1BdVwOmCikWtZkfqTB0xs3Uoz7:GdkscqFLKx3x850B2vOqN0cz7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486336, "uuid": "d8a07058-0d4b-4ebb-a730-4d8e2450212e", "value": 43724, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "aaff791a-0dfd-4aa9-bf2d-5800ac50eb9e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f880a82c-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "ef9d96d5-97ed-46f6-9b92-b74d4a54edda", "comment": "Malware payload (Mirai)", "value": "e25d311d60fb4d7b6079804d1392b2e4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "38025efc-a440-48a3-9023-da2795d6594d", "comment": "Malware payload (Mirai)", "value": "d9e3664ac549e597977393a429a479fa2df95a73aea1828f45979025d7a2ccb7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "f6737516-75fe-4e80-936b-1aeb0de78bf2", "value": "T1E513016B32B6947CC41524BB014F12CDF9BB249ADE4B8FBF50AD52EFEC5391543198", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "70fdeb24-1502-45a2-8f59-b830d69b0547", "value": "768:SAMjByj6AmSw7jj5EjXsT227gKpA6PP6Wf9J96yIIbT2C+x0rwb:d8y+vS+REjXsTYKpAyP6Wfb9lBPYjb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486336, "uuid": "86ae4772-a5a7-4828-84bf-2ced4f3dd047", "value": 45108, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "09666614-9cb9-48b8-b4cc-c2dab2023976", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f88058bc-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "31f54301-4d6f-44fb-b78d-a38a2517b593", "comment": "Malware payload (Mirai)", "value": "ca10ecfb99ec585f8c2255298365fb42", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "2a3803fe-3aa5-4f95-a4aa-b60c429b06a4", "comment": "Malware payload (Mirai)", "value": "63e215877f4fa6d5ae1ac3839bdf95060d86bb87dc95ad4fd4907df1bd8256e4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "cc3b3e1c-50a8-45d9-a0eb-8d583ffa4602", "value": "T124A32AD7F801CDBEF80AD6BB04570A05B631A3E246831F266367B963FC361D55862E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "a068cecf-5bfe-4f20-ad80-b2dd083a985b", "value": "3072:AddnNE5OSXcEkoncSoy1o/VF4NZg9JtjV3Kyzj:4YOSXNOy1MVF4N29l3Kyzj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486336, "uuid": "0eec1f75-d3db-425f-92c1-1b05b98f9c9c", "value": 103452, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "aee49b2d-f1d9-45e0-810d-7a262c9c20d4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f88402be-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486336, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "bb492256-2710-40ac-96ed-1342bcc564f8", "comment": "Malware payload (Mirai)", "value": "91d7c1b2a32fc2bebbc41fe4d625f739", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "6288b203-94c0-4cbe-b329-2264b0380235", "comment": "Malware payload (Mirai)", "value": "716b31a1d7fc9a3ae8ee681d8cfd8640d842d7cc854c6e66f05e8647117725d7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "ecddcfe7-7175-4800-be8a-e8ba98a1f3f5", "value": "T121D39D97F28704A0C46305F003CB1B9E6EA321925E5BD9F37C2EAA3B5E764DB1905B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "94b8b3b5-c664-448b-a8af-b9e9c2c50a6b", "value": "1536:ObuhWNbSPMVg5PqRZbcLTQ0J9Nvl+YahHHRVx6UpgMIB+/LWr:jUgMe5PqRZ4LUE9t03hnRbgMq+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486336, "uuid": "31076478-6b3a-4c5f-b6e7-ca9a3f5d2ff0", "value": 132764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486336, "uuid": "b837b055-92fb-48a0-b588-e7113719116c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f87b5f96-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486341, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486341, "uuid": "206581b2-d1a7-4372-b975-9378498c64b7", "comment": "Malware payload (Mirai)", "value": "8a94991acaa8a3c214bce50e22dc41ef", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486341, "uuid": "a13a4444-79f1-4b64-8242-3d6fa3e43d32", "comment": "Malware payload (Mirai)", "value": "51ba28d3ae1463a1e81e745d5c74cec485f3ed72bac4dd5c2dbcce2745cd8f60", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486341, "uuid": "c5f9d128-bdc9-46b8-922c-74a7ae134170", "value": "T1016301A1C16B2C593712F63BE21AE847BB2687FCD612BC770198972934DA00249F19", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486341, "uuid": "3f264dbf-5af3-4d62-81f0-6e70b5067815", "value": "1536:YRPv4wUQC65jgLpDlA/IIkRIOTuk/GGHLvmrV5Hzwx:ODU/GgVDlA/IIkRIJpGHLvmXHzwx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486341, "uuid": "bc2470af-4541-4fd5-b4c7-e332dcf9b2a5", "value": 69468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486341, "uuid": "d4f50dd1-60a2-4da2-a4e9-7c7fc533f903", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f87ed2bc-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "adeef278-c269-4abb-aa63-3c99645e6e9b", "comment": "Malware payload (Mirai)", "value": "ba9d7c0ff939e5f84b54582f988dc3e1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "c08071fd-711d-4f6b-b4d5-e09a886efaa7", "comment": "Malware payload (Mirai)", "value": "f9407be89ef02648e12067c9618dc66fb0d750f776ebddf0a299a2a531181601", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "0b15e97e-f677-42cc-b2a9-5b5fc755e82e", "value": "T1BD13F170D64D5BEBCED1ADB22DD4E1D1B3631730EE169AB20548DFA13307E4996388", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "f36073ea-50a0-41a1-b9f3-7ea54f91b835", "value": "768:61HjQ+CVOcS1miPZMIFsFs3lw9/a/zaRqUEsmXgzI51dC+9naRldA86OVuqfRemi:IHDVJ1miPfFsFs3G/iVim51dCSMrA89g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486348, "uuid": "2bf67d8e-31a8-4898-95b0-28e2bc7c05e0", "value": 42812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "8e5429cc-fa21-4e1a-9e02-e4c12bca3a08", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6ec3fb0-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "0d6ad409-aefc-4e06-bb8f-c5aef8a07457", "comment": "Malware payload (Mirai)", "value": "248b8c10c0d7a2ea30b004980c187d8d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "f32541d9-5235-4823-840c-1fb1f1150209", "comment": "Malware payload (Mirai)", "value": "6cab3e91a084957a1d488df52a1703e091c1e9c5da44fbb8b42ad6390335499a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "bb66cd4e-f9ff-46f8-a634-55e5bf818ce8", "value": "T1482302E5F27A3C9359C9317785DAC8CA7A3E073DB08A60E11050099CB996EF0767D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "924a4324-0a18-4e12-8d10-d9aef91a4b9c", "value": "768:XSh/fv1XtipWgxIw/kxTVafV/F0SFjZBt8aInFVjvlm7Q+Pqvd9q3UELh5j:k3v1XtipWg2EWTVyNHBm/nj9m7Q+iwLj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486348, "uuid": "0479e0ae-8e7c-4804-a0ad-eee88643b81c", "value": 46788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "c13e7a83-7551-49d9-bdca-b6c64d9c3a1f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8789ba3-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "b0919133-df11-4705-9bd1-37e3e474607f", "comment": "Malware payload (Mirai)", "value": "b5a77f2b63fb38d15b2e2889f884cf11", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "98011547-ca25-4e67-88bf-4a595d167477", "comment": "Malware payload (Mirai)", "value": "f5862c3e7f5e47720945ea267f2990fcba2c421985d730e6b7e02cc0d3caca9a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "8302f337-e178-41c2-b77b-0666450d4e5c", "value": "T18923F11668808FEBCCF7E039855C3BA25F3507553202DC05298BFF229AA7972784A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "f8e37bf1-e70b-47dd-a8f4-c5fed06a8c6f", "value": "768:2K3XVCyrgs2PkDhNgVYRXY00AUOSeYwcCeTqyuSiFCGcX0JgGlzDpbuR1Jxx:5VCggsAP0oKUDiIqyfDcVJu3x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486348, "uuid": "99af96fe-f1ee-48cd-a282-5c160a47fa18", "value": 45940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "5a65825e-9196-4b99-93e5-1bfbc4e9ec6d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6e1f38f-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "678ab37f-f8f8-4830-a93c-6261bfc12a96", "comment": "Malware payload (Mirai)", "value": "8677bb4b1339604200ebdd3399801868", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "47abf945-9c97-421f-a9ef-e0372b7d5a47", "comment": "Malware payload (Mirai)", "value": "daa0c1be97b68f3073f7b02845e9b8c6085dfcd5d32a80e4b39fe79f78b4ff1d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "1e2b1723-4ef4-4020-aa85-d1d9862a9a93", "value": "T1D62301AEB64D94EFCEED3EBE42AE1B464D1371C333845B43CBA648C475A90057AE40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "b9ec6fe5-e0d0-4d98-a997-b675ad1a3af7", "value": "768:l7paSl+zipwOavSeqRdE8BsUCuxuips0FKO/v23nkrjAWi:l0Sl+xhpqRd5Cusx0FKCve", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486348, "uuid": "3f158b95-a5d8-43cf-bcce-bbc9bb02f2bc", "value": 47256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "2f58723f-fa70-449e-be70-5fce53418b02", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f6ee6ca3-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "ed9407fe-9d17-4896-b17f-b31073294421", "comment": "Malware payload (Mirai)", "value": "8f320030c668f8f046a645862e94ff45", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "727e39be-1e66-458d-a8f2-02daf41a73bd", "comment": "Malware payload (Mirai)", "value": "f9fc32468c8a5167ee1550f36be6085b250bc0a3bf280f4ab383b2bc7a6eab30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "1fd4b80b-661f-4ec8-b658-76775cf96d54", "value": "T140A34A22B9760927C4C0A4B621F74725F5F287DA26AC9A1B7D710D8EBF216503253F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "65f84fc5-4d0a-4702-ae10-314c0eca2149", "value": "1536:z/Som9rp0Hy2x2dxAGJdjhs9vTWXo4H2tw0UZhrDN+S5KLfdL0ATjdtkFHQ:zaZ9rpW3yNKTW2G0UZhfNVIfKFdQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486348, "uuid": "75f9369d-1173-48ee-af17-eb8ce5412816", "value": 100048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486348, "uuid": "4b5dfc11-3e5b-4a2a-8165-0e807a1e319e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8876184-0c35-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486349, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486349, "uuid": "b0b4d04d-17f8-40f9-bc0e-b710f8575159", "comment": "Malware payload (Mirai)", "value": "b3bb1d8e2a4fcab6f5948575f695110a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486349, "uuid": "5924cbd3-c9e7-4b15-9655-bb69b1166d8f", "comment": "Malware payload (Mirai)", "value": "f09413bc6323718971fc1448bde743df639cb2f3a0b9147513d6dd7d0aae3443", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486349, "uuid": "b64b94e7-648b-4061-abec-00e5486048e9", "value": "T1A013F196F6AECA0ACD49807945FB3C36C9A04B173A3026BDD721751B22D0F672A0E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486349, "uuid": "4970a8c5-5e47-4827-a8af-d4b6daf20204", "value": "768:J6rgL4hFCD9+6W6wJ9a8KwulW5ujTe3l1DLosuzY+HzCZSvElSs+hrHCIuPRnbc0:ggAOg6eKnlWwTeDvoLzfOSJsWPuPRno0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486349, "uuid": "ea416e93-1525-4902-a43f-0569226f3156", "value": 43552, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486349, "uuid": "70fb4d9e-6d1d-4464-9fc6-b942bf2e512b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1dd571b3-0c36-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771486397, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486397, "uuid": "830a85b3-7e6f-4463-a023-6b5c1c46a99e", "comment": "Malware payload (Mirai)", "value": "f69ddba2b52a45367abdcb19241948d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486397, "uuid": "a30c774a-66eb-4b92-9e1f-37709bb32985", "comment": "Malware payload (Mirai)", "value": "f5da0fd7f7a74bbcbd5ab5b2f95e446e6dff4bb1ac233e508a2c135d6778b6c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486397, "uuid": "aabb6680-c8b4-4865-aa64-b7962f6d54e5", "value": "T1AE13E117D4F1CD02E17F11390EFF398D9850D279518565AAEED8A6228E83F0236687", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486397, "uuid": "3ec56dac-4b31-4be5-9092-40c27a1a1210", "value": "768:hMD8r+c4ASBw5hvYqSHPOE2tG/kpv1fCFqvzniy9K5Nuyq3SiREzPM5Fmanbcuyc:+iNhOqAqSHWE2tGctRqq2yqLq3XiGFmm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771486397, "uuid": "da03a276-d83f-47f8-9375-fd1c339e1c8d", "value": 42224, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486397, "uuid": "4246baa2-0c12-436a-893f-aa441ff895fe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bcf44547-0d68-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771487892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771487892, "uuid": "f0355de3-1091-4445-8649-6f11d85de269", "comment": "Malware payload", "value": "c0865d46c355a8a03f5739c680e34a24", "object_relation": "md5", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Kepavll!rfn", "colour": "#7c40da", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771487892, "uuid": "e96cef95-67fd-49c2-a42b-7d1a874d6e43", "comment": "Malware payload", "value": "c0f442f58c3dcca1bbdfd1911082cc84190b1b1247add42b8e2750f41b84ded6", "object_relation": "sha256", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Kepavll!rfn", "colour": "#7c40da", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771487892, "uuid": "45a53803-90d0-459d-8cd9-fdcb1d56ca92", "value": "T1551833535A6C8FC60F57D710D4F1F9CA9029B870E098D91FCA6D89F1868FEA33629D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771487892, "uuid": "372f9ac6-e84f-4920-9403-1faa4f655bcd", "value": "1572864:/W8LjPd2jO8aUvFQXToTgN2xHkvl2tbHfSnxL7xRzZReIl2s/fa9:/W8fVSHa3jKhIjdNRzjf2sc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771487892, "uuid": "b7bbedee-add5-42ea-afaa-a776bc3bded8", "value": 88909310, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771487892, "uuid": "9eae0ae3-9343-4e1c-a6fb-7d9aaf989239", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5eb04dd8-0d69-11f1-8369-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1771488163, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771488163, "uuid": "33434ffa-6acd-4146-bbc2-38bcb97b23f7", "comment": "Malware payload (DarkTortilla)", "value": "e745df0c8be81837c89e236084e4a7b3", "object_relation": "md5", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771488163, "uuid": "eb9c5bac-a2bb-4696-b676-dd29c9a0b3e3", "comment": "Malware payload (DarkTortilla)", "value": "d864a30d450157ee025d97dcd2a6a6bf386719fc4c14ca361f85aa914665657c", "object_relation": "sha256", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488163, "uuid": "aacdeb0a-d678-4c83-8a4f-968ce9a7ecc2", "value": "T15A4622393E434505C63A57BD81268EC477F0DA8B9B03C71FBBDE01ECAA166A797213", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488163, "uuid": "e587812d-4129-41e4-8ef1-2c481383af4c", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488163, "uuid": "1fe1b5d2-26c4-43b7-b293-e249e44bcfc9", "value": "98304:bm8dwNuAWm3GMvD+dHLR49AdY3WkYSyC:b9vNm7r+dR4WRyy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771488163, "uuid": "2afb804f-aa7a-47a0-8ccc-ae7bf360fd51", "value": 5579264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488163, "uuid": "9196a25b-58a7-44c1-89bd-db9be6fba02e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1137836c-0d6a-11f1-8369-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1771488463, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771488463, "uuid": "768879be-ed0a-4fc4-ab4f-190c09a2452b", "comment": "Malware payload (DarkTortilla)", "value": "ef5f37ddba2061122d4f2ae808e628cd", "object_relation": "md5", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771488463, "uuid": "d8d3f6b1-fc8a-48c4-bed9-88ac81098791", "comment": "Malware payload (DarkTortilla)", "value": "98ff47edbe5122e7cf7993e6009bbceda548db7bb2ccec334dbf7aeafce75086", "object_relation": "sha256", "Tag": [ { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488463, "uuid": "885fc67a-1ab7-43c8-a7e8-da40f0d37477", "value": "T1C955D02A3D834B41C5A6AB79C6620DD423F0C6A38612DB17FFDC01F4ED1A7B9E5217", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488463, "uuid": "242a1e12-3df4-48fa-bfad-e51921c2932e", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488463, "uuid": "3c17c678-2eb4-4bf6-bf86-bdd352b91b40", "value": "24576:AndHYSP4lTp3YHdCvVGEWCnRveYepqMKDmfC4KOSSn2l6W:m2SPYp3MdCvMERveYkqM3fC41p2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771488463, "uuid": "db1a29fd-9c4f-4eb0-b081-b4939a8c8f33", "value": 1340928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488463, "uuid": "ab32e8b8-0abb-4ef4-a125-1561e25232dd", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b8773c99-0d6a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771488743, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771488743, "uuid": "6cd3590f-b446-4ee2-9f25-072c78ffd99d", "comment": "Malware payload", "value": "bb73f8ece56ee0e2b9ae4d5e69f899f5", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771488743, "uuid": "27f2757c-1873-4034-b5ea-6369a77663e5", "comment": "Malware payload", "value": "82fc98c1aa269c3cf67f23ffd8c632b47fda0232d268c027452c8df0710a44bb", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488743, "uuid": "e25d3302-c25e-4cc7-b926-bfc9ead0af30", "value": "T1B4B423C1EA28C21782BCC22D3B45EAE5B75751D0E5D4CC33B5A8D2CC316F62B9A17C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488743, "uuid": "56a8854f-2b76-4630-a37c-61e50cf8077c", "value": "12288:bUyXZllg1w3s6hkDuLDBDwTG6aWxiB0nixFflfziGvAFDCq:bPJIsVBDYa8lnshvOV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771488743, "uuid": "455c8c36-8f9d-4c33-9c3b-ed93f9519953", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488743, "uuid": "03c21fd4-5493-4a99-91e7-7338579db18c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "746827b7-0d6b-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771489059, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489059, "uuid": "3801a603-0270-43ca-aa69-aef7e86cf685", "comment": "Malware payload", "value": "dfb0eff9f81228ecfae31c15a8a05121", "object_relation": "md5", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489059, "uuid": "3a4f4730-f338-4e22-bc61-af47f0ca1cfa", "comment": "Malware payload", "value": "b54939881c946c9a7ea237852acc92c0f6c0705cf1552706e8d7c1c8d536a313", "object_relation": "sha256", "Tag": [ { "name": "njRAT", "colour": "#62a25e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489059, "uuid": "9677ed82-9c7b-4a71-b049-0efde72e299c", "value": "T1F6E4AE2A7E530B41C67AA77986331E9423F0CA938753CB0BBFDD40F4AA2A7F4C5616", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489059, "uuid": "804dc592-8c0f-49a8-aaf8-5f55ddb62368", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489059, "uuid": "29f5dcfe-27a6-434d-9ce9-c0bf69ce408e", "value": "12288:XwmiCRig/+VndCq7Jb8G26y7p3YS+quCvCY6+6WGEJ5BjQUgzB:XmCR0ndP4lTp3YHdCvVGEK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771489059, "uuid": "3746ce45-3016-4f8b-a877-2265cc6d1e36", "value": 679424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489059, "uuid": "9b8add61-807f-4dc2-9b70-4402e496801e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c339d142-0d73-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771492627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492627, "uuid": "7d967938-8473-4082-962b-5f30a1b84251", "comment": "Malware payload", "value": "08711f103bece599edfe7025feaa0a8c", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492627, "uuid": "03435aa9-8137-41f2-94c4-2ce807ea8f8c", "comment": "Malware payload", "value": "daeb6a7ae7b27600320f02c8db142f3b71593e1b6df9f76d99237abac83b30b6", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492627, "uuid": "89b06eea-1545-4291-aa72-d374b08904dc", "value": "T135B4226ABB955F61581833F3A36DB12300EC3E41C58A7A5622B0CEE779CD9C6F101B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492627, "uuid": "961e7346-380c-4b77-b9e5-38956b77de25", "value": "12288:yAHSjtVggN4bDbCj+Olo08FuhxpjJmcdhpoCzmTwOnY:dyj30OCpwNRjmVnY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771492627, "uuid": "a0825ea1-1475-410e-a61a-8c0ef85ae971", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492627, "uuid": "cf448ae4-5203-43cb-8ba9-d07c75072a38", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c33e3f53-0d73-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771492627, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492627, "uuid": "3086d0cf-c302-4bef-9830-12ddca81026e", "comment": "Malware payload", "value": "e06951d6aceafc7fbbcead0ec2157cd7", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492627, "uuid": "fe65664b-964c-4015-963f-529f9e0e11e5", "comment": "Malware payload", "value": "72b8f008587a8f188d2b7af21d891fa7152171f680185ab21f00636ed58f6e93", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492627, "uuid": "dfb1d809-5d21-4279-9c58-2b322af8ea58", "value": "T11C341215AB7045D7F093B37620127DC856B1FD74FE36B6CBC9A9080E7905EAAB21C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492627, "uuid": "aff9b1b0-e213-4a39-a078-6a71b0cdc6d7", "value": "6144:aX/xjBMY+wK9rUJ44T/buaYXYnD/5fMwEyn4kma5:aX/xK+ar7g/bPUCDv9n4NS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771492627, "uuid": "813066e1-bc62-4c8a-b1fd-3824da2a727d", "value": 244800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492627, "uuid": "78d22428-c07c-43ea-980f-e122f3fe07c5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3d4ebad-0d73-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771492628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492628, "uuid": "9af1e01f-56b1-4d6e-87dc-76ca75129690", "comment": "Malware payload", "value": "4d1d0d2914c6843fa6d614b897e851cc", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492628, "uuid": "622ab7d4-eae2-4ca4-9381-8d4789d93604", "comment": "Malware payload", "value": "52d0fcda4ea9732374959f042cd39df04b695de93144463c00d91bcce1b355d9", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492628, "uuid": "5dcea8d3-588c-48dc-9181-5346c395f3ec", "value": "T156B422BD50216BEB16469EBB1516A0F1FF75F56888CA00A2D5CC7ECB8BB45AC10CB3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492628, "uuid": "197cc5de-642f-4960-ac71-91678db8a4a3", "value": "12288:L5xEPmGFj+faC8NWk9SlsLOSpCUg68yop54pcdZwTkqFXQbc6o:dxnGoZ8NbEsLOSo6tK5+cdZoFAI6o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771492628, "uuid": "a37d19bf-1f4e-415b-b5ad-df2f4ab94d31", "value": 528448, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492628, "uuid": "6c82d77e-6a53-4396-a6e2-56af8e9fc5f5", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bdc9bb6-0d76-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771493769, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493769, "uuid": "6668076f-04bf-4d3f-8959-a546e1515c7e", "comment": "Malware payload", "value": "a96d4201a3558f7a4d1ab1333459813e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493769, "uuid": "7cefe17c-552f-40fe-b328-634da24585c3", "comment": "Malware payload", "value": "5e7a01d89dca65beeefaf25156dd4a69cc3ed8771b2652e8cb4d7ff1ac9ea124", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493769, "uuid": "c4138c55-3b5d-44a6-8987-48ee333d7286", "value": "T1BB94DF3ED6658BCA7E2C7E1C80524EC11FA4B7C36A6D8772A1C6EC6FE954831601B1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493769, "uuid": "98d10947-db4a-4c31-a5c5-b831be60f8ba", "value": "6144:iC9w1N/trR18uKP4IkLQfbHd/R4Fb6rEZUDCqhi7PUPfwNYNASpx8LAigmDxRcjy:iCuNNDI1fb9/R4p6gCC/ufwlLAV5NZ4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771493769, "uuid": "183e7ed7-b424-4b78-96f5-1f2589511d2b", "value": 414124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493769, "uuid": "8f2846e6-cd34-4821-8e85-ac135f13253d", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8f09130a-0d76-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771493828, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493828, "uuid": "511c913c-024a-456f-bb20-078890843c03", "comment": "Malware payload", "value": "9cfab92c1ec59a6bf2e6fb85e9068657", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493828, "uuid": "503b639a-fe21-413b-9cd7-29725e77a160", "comment": "Malware payload", "value": "0f7f244b9da6f48adcbf9e5160a763435c7d5a8502dbaaa5d79270c758271397", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493828, "uuid": "21a16f91-9cbc-4a44-bff8-ab25e0734cc4", "value": "T1CBE2E14EFC564566ECB64AA06D199FF0E0B152F38D1C929BBE3E74268204EC187DFC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493828, "uuid": "62110e07-7b1b-459f-9149-11efda2f880f", "value": "768:SQG5JJLUPVq3EXm/tZDE7Sy9XFDIJpd+SwnJ1vPtHQFi7iOY9LKu:SQopmVnm/tMXGynJ1v1w4ix", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771493828, "uuid": "93a2b72c-f9b9-46e3-b6b3-4107900a72a3", "value": 33344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493828, "uuid": "2da4d8b8-d31e-4d64-840f-866e4cfb800b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "90bd2b68-0d76-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771493831, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493831, "uuid": "8356874a-a069-45bf-989d-f48a733011c1", "comment": "Malware payload", "value": "16c2656e83b993a614730ec6bfda8363", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493831, "uuid": "2f2ed723-bb9d-4ec9-b859-519c88ec9c14", "comment": "Malware payload", "value": "d00515e3f6704152f863adf9e079bf15e6ce833dd824a1005d45df595d7114bd", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493831, "uuid": "63e837be-2461-4d27-b857-a1d33d7cf93c", "value": "T1CFE5AE72A203BEDA526A0CACC4503D002D999D6B9B1681EC7ECC5BDAF16E118DDFDC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493831, "uuid": "fd88f022-02b4-4500-8647-381fc8b5388b", "value": "49152:8UixbItdTrJoFVPMvXGBK6NMm8A4BQyzIdIh:7iBI/JoFdMPGK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771493831, "uuid": "3524c78a-2e32-4a4c-a33e-65f99e15dde0", "value": 3241480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493831, "uuid": "ee4a5bb7-3106-4625-89a3-bdf78ac193d8", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9daafa0-0d76-11f1-8369-82aee05be84a", "comment": "Malware payload (SnakeKeylogger)", "timestamp": 1771494007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494007, "uuid": "29939658-a600-4df4-ab2c-33ebd1932473", "comment": "Malware payload (SnakeKeylogger)", "value": "8711d7ff43b4a1c0f6e887daa3e3e434", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494007, "uuid": "4e4a4994-8d72-41e0-98c3-ea967f13fe21", "comment": "Malware payload (SnakeKeylogger)", "value": "1b03ebf58852eadfb7135ef0c934140f6068633d15690caa1c1fc8fbb5fcc423", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494007, "uuid": "65062eb0-1235-49eb-bba7-8d4108f3f908", "value": "T186453AF7DE54B0D9CCA3B9218EB18782AE90D70A7D267FDC304202D5CBA8D7117AB6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494007, "uuid": "5a73e908-b215-4b6e-b9e2-6b0bf55b8c33", "value": "24576:lZUII29ZcI6vDluHji8940s49TrgL9nSNRkfb328GXLyIm0xsgO7ujvZn:lLIp03S2xx5Rn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771494007, "uuid": "e4b1b77a-45d4-47af-a33f-fb4ad18fd125", "value": 1224676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494007, "uuid": "bae11812-92d1-4747-8086-28d11ef569a5", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "65a0c587-0d77-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771494188, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494188, "uuid": "1e8d2e9d-1802-4155-aa3a-80eba4c06d64", "comment": "Malware payload", "value": "51f94107a81828eb1c72d9807c5b5950", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494188, "uuid": "3cbc0555-9a6b-4365-8cd8-72d70981a779", "comment": "Malware payload", "value": "dd1c2bf6d96a062513b39474823c07a3e470aaa174f77eba574959fbf3c5cb9d", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494188, "uuid": "456fefa7-dd43-4f93-89e2-4c42eb81515a", "value": "T1FA5401362B6874ADCBB70850695B31559F883C07E48181BB4FD14EEF20E869B1ADD7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494188, "uuid": "de1bce64-1bdd-4e24-9ea2-004b59dcdaf8", "value": "6144:zJ0eMCwJEdBK0u7IJgrzrPCgrrywDfwZehjUlES/7:zCj7JEdd9JgzqGxfhNcjD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771494188, "uuid": "a94b6112-ce83-4b76-8bcb-4918773b525b", "value": 300412, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494188, "uuid": "4547ceac-a7b1-4c81-8e42-3ca3fedd5abe", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88c1ee36-0d77-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771494247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494247, "uuid": "c5065e73-9473-4592-9004-d02b761e3497", "comment": "Malware payload", "value": "7ef906fc07eec7e8aaad0bd0fd0e5d78", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494247, "uuid": "bb347e51-39f1-4e3b-b916-8f1d53cbb497", "comment": "Malware payload", "value": "38838968d2316616a69471cfaf67f60e0e76b16b64d4539405566f18a0653a2e", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494247, "uuid": "9fb5d563-285f-47ea-b794-f91da9e6c8d6", "value": "T114F423C83717F298B67811ADE45E613AF6B409DA5D518361F806628CFC9CEACD0E50", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494247, "uuid": "36d7f2d9-f5a9-4cb7-959b-1334128130dd", "value": "12288:7UGBXbci7tAbekZpiAqtyJZvMq1qs50wTR3en2s7TeoKGtYc7yI1Rkd27AHtSOgE:IkLPGbbpS2kqMs5ra24THYcmmOo7AHr9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771494247, "uuid": "6574eb82-a90e-4400-a479-f4b67ab881c7", "value": 750656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494247, "uuid": "deaa8031-9226-4cf7-9a48-c804b363a328", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af0b2e93-0d77-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771494311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494311, "uuid": "002cefc8-3e17-4e7c-b2ef-800b4a6f6297", "comment": "Malware payload", "value": "8df758583a6a1f1afbcbaa6029e1603b", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494311, "uuid": "ed491872-9935-4a64-84f8-63737f51d795", "comment": "Malware payload", "value": "4a4c7465138a42081b4d9ad5e1c994b410fcab587aa1c4ccf9f796b14c04ccbd", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494311, "uuid": "1c59e311-4510-4b02-84cb-ac88c8b1f5af", "value": "T11D746838D8726E79C86CC43316D3EBAABD9A43939D1575E6358C22C30570BCB246C6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494311, "uuid": "61a90dbe-38c4-4958-8b4f-424bbd5b8990", "value": "6144:Ttee1lImq0p5+Cj+UR/1Ppb+XHNCgUknfyIcGY0LYx2plZth3CCxFniw1N3FUE:TAe/IEVAHYgr6Iym3CCxVj3F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771494311, "uuid": "71b4127d-4c25-475b-9c3f-73ed0dc362bd", "value": 338048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494311, "uuid": "08406dc2-f0e6-4fc9-98ff-32d234f7ed88", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "af129626-0d77-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771494311, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494311, "uuid": "931232d5-e8f2-498b-bfb1-0e6c0093829e", "comment": "Malware payload", "value": "2b56e6a573f448eaf751387dee474e5f", "object_relation": "md5", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494311, "uuid": "889a9162-890e-4ac5-b0cd-2feefbb7fe7e", "comment": "Malware payload", "value": "bd5954b757bc3cedce4fe66fd5a3b6bf02d129f829336c9a453b2b8488429195", "object_relation": "sha256", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494311, "uuid": "564a4664-8f05-4b58-9dcf-1c603ae30dab", "value": "T168F4231458B696E417598F1B39E8872BEC8A8AC77D4F4D28D4F71C0BC7404279ECEB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494311, "uuid": "7b196807-0eb3-4f59-adcb-6e162f729c80", "value": "12288:DOUyXeCJhWIct1jIo4oduHTi57JgrdoaPxf6t65LRjuGtrW6CG9Se0z0lZ7UM:DkYZ1jnIHTi57qZoIxf6cLv809lZwM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771494311, "uuid": "05e90c97-f303-49b7-a367-29f8814d9c54", "value": 750656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494311, "uuid": "b53b02a2-e137-402f-aa88-67ef7449481d", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d083cbed-0d77-11f1-8369-82aee05be84a", "comment": "Malware payload (AgentTesla)", "timestamp": 1771494367, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494367, "uuid": "724dde67-ae09-48d7-a750-8c01f4714e93", "comment": "Malware payload (AgentTesla)", "value": "072e8cb38a09471c4420e2a1f7851925", "object_relation": "md5", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494367, "uuid": "0d4e6acf-06ce-4a29-9125-86c715a99046", "comment": "Malware payload (AgentTesla)", "value": "eda40d681f6ea2b900f126213aec01c313ba6807ddc417d433de288a70a1d173", "object_relation": "sha256", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494367, "uuid": "339b98f4-bde5-4bb5-93d1-695d471ae9a7", "value": "T1A33519C73A7DD8E1FC7F40516374893A5B486B6AB7DA14A180C3EFEF4E81A7027889", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494367, "uuid": "5997d3c5-3f10-44c7-8574-cdabe320d87f", "value": "12288:Q5j5gjhAdWYCYhxHWnZwiUOilNlAlg2urW2XCc1YZOm4cLrLoz:Q5j5xg4AZVu4Om4cLPoz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771494367, "uuid": "dc5323c0-33b0-4b38-8775-3b65e57f4691", "value": 1089102, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494367, "uuid": "d7e98448-7170-48db-be2b-2db98be769ca", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60c6d94b-0d78-11f1-8369-82aee05be84a", "comment": "Malware payload (Formbook)", "timestamp": 1771494609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494609, "uuid": "a1cbe448-52fe-4963-80b4-4393ba1786db", "comment": "Malware payload (Formbook)", "value": "7a3f50e94ec8220336b09d1bd8262324", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494609, "uuid": "0e51f88c-a71b-419a-826f-1160876a6ec6", "comment": "Malware payload (Formbook)", "value": "77a5feee7953e00f11442a1d65afd8350970dfa373b266140428e0c937001777", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494609, "uuid": "2cbc627b-920b-4c49-9d16-acecedbbba69", "value": "T1D1F2EED2F97CB7E4C9879C00EF36D7F907694C120D286D5AAA5184BDB9A24F7D02EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494609, "uuid": "22d94697-01e4-4e38-94b9-933ca6dbaba6", "value": "384:CUl/T0G91l4MwFU0OiJHev85gsDzG4W+UttSVCyOQ53vRpCQ46gxiNdROYoh:aDhOPyOXlh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771494609, "uuid": "7ee4578b-aa1e-4a21-8165-d990e38c3be8", "value": 37094, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494609, "uuid": "8a8460c0-ce23-4105-83d5-36cf074cc583", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61587fd5-0d78-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771494610, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494610, "uuid": "96457504-f3e0-4b72-beaf-e89ab30c76ba", "comment": "Malware payload", "value": "b8d46ab8c259ff5c5e982f4f19f78e40", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494610, "uuid": "bc1c2116-6f8b-4d5d-9e6d-7cab23f5bf5b", "comment": "Malware payload", "value": "64d381d30df1f62323032961121771e1814e0152beae4afc4e5c98e564447f00", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494610, "uuid": "30d5b445-541f-4ba2-9ef5-a7b0fad2ceb3", "value": "T1EF8423397FCB9DBD0AA81570F0DB3DE60CA046A3D09898894FC6702E52FF7961B178", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494610, "uuid": "0cc719f0-ddc9-4155-8464-61ef743b4cf1", "value": "6144:P/LY0BOqq0bLMdbb0GgC74y2SVriN7otYqKA4WnHpiVhV4tF0/VkWkqX9:nTBqcoIOTgNFqKyKhVOF0/VkXqt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771494610, "uuid": "a07c9ea5-f9d0-4fe2-bfe7-e60f20137dd4", "value": 379752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494610, "uuid": "511a9756-e74b-4253-84ab-68d3b62f143b", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ae930122-0d7d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771496887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771496887, "uuid": "1b91648e-62ea-4539-8c26-5fb23cb1831e", "comment": "Malware payload", "value": "044002a0dab538412d30714109fb130e", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771496887, "uuid": "d5a433b1-aa8e-4adb-942e-86d151e81557", "comment": "Malware payload", "value": "8631f0f5ca68509fa0b19481a5622574e07d8d13a41a5983b421854d821b519e", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771496887, "uuid": "c4728879-b584-4506-9fc6-564c0a00b9dc", "value": "T177C46D7A52B25D6E4D390F45E43013903CA90D9BDDE0D1DA7E82B4B066F98249BBF8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771496887, "uuid": "b79de2d0-aa2e-4d61-9084-21fa09d509fd", "value": "12288:CMtujMSbnyBCZbQyCxnwK+5rhgmTuP7QGdzWTeVvjJ:JtInyBoud+s8GlvjJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771496887, "uuid": "36e8cfc1-9fcb-4f7c-baa9-759901ad4a6a", "value": 567983, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771496887, "uuid": "f7e88f6e-316d-4e7b-9f25-106320f8ee10", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771500793, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771500793, "uuid": "249b7c7f-cd96-407f-8407-c1c5fd6ab912", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771500793, "uuid": "0f6e1936-fd5a-4e25-9407-f4df2dadfefd", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771500793, "uuid": "12ea21ec-7078-4430-aedc-f46c179150c9", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771500793, "uuid": "55745752-a4f6-46b1-9d7c-f32b57f59a52", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771500793, "uuid": "44b1259b-148f-41e8-b049-39c934898487", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5cde86c-0d89-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771502107, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771502107, "uuid": "d01a9813-e409-429b-8caa-73c875b3d164", "comment": "Malware payload", "value": "7b22729ffa6eb08197b6fa39e59c8df4", "object_relation": "md5", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771502107, "uuid": "ff807142-6670-49cf-8265-1afd278de7a8", "comment": "Malware payload", "value": "88a248313e37ed7c54b9eb693d395a8157f74fe11113ee55b46f4146850f320f", "object_relation": "sha256", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771502107, "uuid": "7c95d9e9-19b3-45d8-a270-d7b7a70a539a", "value": "T14C31471C07D90216E2B28E7AA0BEB341C6257891ED479E5901C1A6887062141F9B6E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771502107, "uuid": "9d2e5a32-224f-4036-af4b-0628b9f7b28e", "value": "12:8N0m/3BVSXzvmnLA4DnRnQ3+fIlVlDmo0I6iNkmcfnAVJnC3Y3z:8NJ/BOmTA+fk4o0akjwJ4c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771502107, "uuid": "ec058d7b-9119-4ac2-bec2-0c78c778adad", "value": 1623, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771502107, "uuid": "a9801ff5-ce47-4e08-9e42-19f74a091d98", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e2c85b4-0d91-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771505396, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771505396, "uuid": "8abdf6f9-e27a-4bb5-80c3-04056120635b", "comment": "Malware payload", "value": "b890dfe89675517af726218d55ae1312", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771505396, "uuid": "2f0ae87e-b68b-40a6-834a-7b6e57a42ae5", "comment": "Malware payload", "value": "fcc0a402a5bbf60b84eb2e2715c72f61dcaebe571c78df491f26a5c558b75289", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505396, "uuid": "8d341596-6251-4290-b910-393477539eda", "value": "T18D34F922A5CC1E3D85B386E075266B0EFA7D9013DA492989FAFC17970FF3CB195136", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505396, "uuid": "789abd38-f3ff-4b98-a90a-fbac7525a2a2", "value": "1536:EFebzcLmsfZMJYYj2TyG+sbubuqAfwudV+8aTS8cHYAbhrfCu/RXLwHGkuW7eyXK:EI/ImLburfwY7E0LwmEt9dM5Cc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771505396, "uuid": "e0d3a13f-6cb0-4655-b497-ac384a202c1b", "value": 230618, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505396, "uuid": "119f1816-e4ce-41ce-9d35-d67a00c42f24", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddee0306-0d92-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771505986, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771505986, "uuid": "b6bb2715-296f-4559-9bd5-7e1f2672c08b", "comment": "Malware payload", "value": "cf8bc94b346e30f40c35d9dc272fd736", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771505986, "uuid": "2efd5f97-ea9e-4af3-8db8-9352286ca2a1", "comment": "Malware payload", "value": "d92cc80c931635341c2469ec120f15f6c712355a9be7dde7509090b805ae13e6", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505986, "uuid": "cb81e00d-e801-4a6f-82da-3531b43ad62a", "value": "T1922423DC5A80077CE06401F41A8959C6D381AA169DFC366C7D668F3CA1BE18BF9C87", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505986, "uuid": "e3887a79-e6e1-4ebe-8daa-bb0a5ac3669e", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505986, "uuid": "c4f58427-95e3-4664-b1cf-da55b361377a", "value": "6144:r8bUZj8uuaP/5nU2bDtwkiBcqg5MOnxTe6:r88j8InqGDtl+LcMOx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771505986, "uuid": "529eb9ff-b7d6-43ea-8b76-3fd58e71dbc0", "value": 223744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505986, "uuid": "e809111b-cb9c-4162-a7e9-a3db32e725c1", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "705895df-0d93-11f1-8369-82aee05be84a", "comment": "Malware payload (XorDDoS)", "timestamp": 1771506232, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771506232, "uuid": "12113d57-bcbd-45e9-96b5-26ed1dc2cb95", "comment": "Malware payload (XorDDoS)", "value": "87b48cad3e05edc3a20bc65539c0cfc7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771506232, "uuid": "e56ee2cb-7329-43fa-bd39-276418af06c0", "comment": "Malware payload (XorDDoS)", "value": "5b15e7a49f953e28a06ee8aa2d50811edd8566005117af2b0599d07bbd41d8d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false }, { "name": "Xorddos", "colour": "#d055b7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771506232, "uuid": "9910e2d9-80ad-4f63-9e00-82ea68c27ea3", "value": "T166C45C06F283A2F7D42705B0124BF7BF8620F63594129D9BB7989D5AB9338F12A4D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771506232, "uuid": "116072e8-d8b8-494f-86b2-9eda1a365554", "value": "12288:VBPbw1CH/FwznbIU9sE8c8lqd49N94wT4JoqLLp6yWrk3:VBPWCH/eMU9Uc8gd49N94BJoqLL4ru", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771506232, "uuid": "57ec69a6-085e-45c9-a323-19ea394c0b26", "value": 555272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771506232, "uuid": "8495cc0d-c0bc-41e0-87be-c98681936084", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d5886bd4-0d93-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771506401, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771506401, "uuid": "b8d97f9e-aad8-432f-b5a5-003689448809", "comment": "Malware payload", "value": "b7c4874ea619305d5d380672cdb2a6b9", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771506401, "uuid": "4fd62b14-64c0-4fe4-a969-87b196d28581", "comment": "Malware payload", "value": "10fe3a52eaab0d4f1c0fd1ba89ba7f6674fb2f0b464110a25ee18bce30d88bf8", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771506401, "uuid": "c458ac68-25f3-4461-b63a-cdb7ce8fd1eb", "value": "T106F4BF25AE531B01C16AA77985234E8823F0CB93D593CB07BFED50F4BB2ABB5C5617", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771506401, "uuid": "483adc8d-21d8-4c03-97cb-14caafb53200", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771506401, "uuid": "02ad867b-7895-40bb-975e-1fb35b8db7e8", "value": "12288:Z012pWt1LNCq7Jb8G26y7p3YS+quCvCY6+6WGEJ5BjdYzc:WplP4lTp3YHdCvVGEzwc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771506401, "uuid": "4e34a761-c455-47f1-a2fe-4345b1cf6da4", "value": 733696, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771506401, "uuid": "ad3496ba-1147-42ff-b093-e9062e42832a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71eea880-0d97-11f1-8369-82aee05be84a", "comment": "Malware payload (DarkTortilla)", "timestamp": 1771507952, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771507952, "uuid": "9e8d598b-6711-4276-ac7e-07c13636730b", "comment": "Malware payload (DarkTortilla)", "value": "bf3319a1ec6a8952453d2eebd828c37d", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771507952, "uuid": "f8d5f6ac-2cce-4c5e-b692-d303c8f469dd", "comment": "Malware payload (DarkTortilla)", "value": "c2f557d0ec74807286105a5a4a0303d68638aaab4642aba9f035231742a0f38e", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771507952, "uuid": "8c0b581a-0a41-41f1-930a-28d83e2ee027", "value": "T18645D02A2DD31B40C1A2DB79C3760D9463F0C6A75613D71BBFDD02F4EE1A3BA95222", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771507952, "uuid": "187f8139-d211-48c5-8f68-a8664fa09c19", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771507952, "uuid": "efd1bcbd-7dde-465c-ae87-2a7ece67bd98", "value": "24576:GRXIzQP4lTp3YHdCvVGEtpojZ6tm48YB1KObv:GRyQPYp3MdCvM0Oj94pP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771507952, "uuid": "a4738fe8-66b6-4ae2-b7f6-72e454ee0f26", "value": 1270272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771507952, "uuid": "17171e19-37dd-4832-928b-eed09e0ca49a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "edc338ae-0d99-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771509019, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509019, "uuid": "c79b8361-e8b5-41c4-b997-1be95ea30e1f", "comment": "Malware payload", "value": "140862077685423f1c5338a8f6e3aed8", "object_relation": "md5", "Tag": [ { "name": "coinhive", "colour": "#269d5b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509019, "uuid": "60899de1-8d38-404a-8541-e812fe2561da", "comment": "Malware payload", "value": "724cb407ce6819eb90a4beb3a7df5de0e93e4d669389d5a499578a91733ec3d3", "object_relation": "sha256", "Tag": [ { "name": "coinhive", "colour": "#269d5b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509019, "uuid": "85f82d7c-1402-42bb-9091-7d5ee468c3bb", "value": "T13E4296E8F7ADA63A473E10A62A3E5B9D743C4073A50A8C53BC6C953C5B90E1D1119C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509019, "uuid": "a42e9d93-fd3e-4cde-8ba9-c3260550307f", "value": "192:Rc/iaYi34sgkL+0o7lDv6HRCMz8PGjvgcBMHaC14s7EBurmrehXxnLKIuSqmsn:Rfo8uRCMz8+9MHaK7EBuyGXxnduPn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771509019, "uuid": "f85302aa-28a6-457f-b46d-35945e8783a8", "value": 12762, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509019, "uuid": "a3aba20c-fb78-46c9-8926-4b87f9edfe0e", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4f6e2823-0d9a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771509183, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509183, "uuid": "a98a7ac8-4c6b-4dea-b38d-9f5b431b583a", "comment": "Malware payload", "value": "ef9219b69f0e3b62c6daa869018068be", "object_relation": "md5", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509183, "uuid": "c6330003-b3aa-41c8-9bcd-8084620f3f63", "comment": "Malware payload", "value": "40418a5c0b271e9119d21af4be73d4bef5fdf3276b2d6490ebc321fdce56101e", "object_relation": "sha256", "Tag": [ { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509183, "uuid": "bdbc7937-1c90-4184-999c-259a7f630c36", "value": "T143A61278F5B788B83F3400A222EA9BC0D9E80C5EA61335592552B3CDD549C7BCED2E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509183, "uuid": "582cd8a9-e1a8-43a9-8d72-1778beca04d7", "value": "192:2javoC6k5k8Fre4zy3jEdH/d1E1GkCr7Kk2/hfAbXi:2uWUe6y3jEBdCFCr7Kk3O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771509183, "uuid": "d5913676-cfc3-4373-934d-ba16ee1eb9a9", "value": 10301052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509183, "uuid": "f0ee8eb5-a6b1-40df-8580-1d739d629901", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d306b107-0d9a-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771509404, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509404, "uuid": "3893640c-3f35-4816-92a4-cca43dd60717", "comment": "Malware payload", "value": "1ab21ea7f6b953110580842e04cedc98", "object_relation": "md5", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509404, "uuid": "2bb41b81-4241-468a-bd05-141a762b434e", "comment": "Malware payload", "value": "aa4a158d2d5d185d40c98d9258b7f12065d827cd4712bc0b74870c1c227796dd", "object_relation": "sha256", "Tag": [ { "name": "asy", "colour": "#d20689", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "CaminhoLoader", "colour": "#0a1beb", "exportable": true, "hide_tag": false }, { "name": "dcrat", "colour": "#75ce72", "exportable": true, "hide_tag": false }, { "name": "PureLogsStealer", "colour": "#110c7f", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509404, "uuid": "4ea06697-2e97-4f3c-8d7b-bd3294feb8b3", "value": "T1D4A612E1B1663D4DAEA9A0FF6C42426D9F38901F294FDF5F4180C1BB9AE003737598", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509404, "uuid": "5ba1fde8-fc77-46fe-8487-b73431f39c12", "value": "192:TXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX7:VN2ev5H3rdKbjpqaKycSPymWwJH4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771509404, "uuid": "94ddaf4a-0117-44a0-a38c-1ba1c112829b", "value": 9861087, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509404, "uuid": "62bd6bf9-8021-4e0b-9b83-c09847f52cd0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e4070d20-0d9c-11f1-8369-82aee05be84a", "comment": "Malware payload (PhantomStealer)", "timestamp": 1771510291, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771510291, "uuid": "5e33256a-394c-459f-bef8-2805e9ab7985", "comment": "Malware payload (PhantomStealer)", "value": "a16f0d8380db597c0f705207417f8792", "object_relation": "md5", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771510291, "uuid": "049def20-6ac8-4712-8402-f477679ae8fd", "comment": "Malware payload (PhantomStealer)", "value": "55a9d922e96e48f6dafe5d3a8026268cc10ae3958b61b9121f0e4c93edca3b29", "object_relation": "sha256", "Tag": [ { "name": "a310Logger", "colour": "#4798ea", "exportable": true, "hide_tag": false }, { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "DarkTortilla", "colour": "#98530E", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false }, { "name": "QuasarRAT", "colour": "#d8caed", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510291, "uuid": "5175474d-05ff-48f0-90d2-476d67e75e8d", "value": "T10285F1357E834B41C627677AC5230E8423F0C5929653DB1FBFED01F8AA2A7B98A713", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510291, "uuid": "64936e73-7eb0-48f9-bdf8-c95035c07114", "value": "f34d5f2d4577ed6d9ceec516c1f5a744", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510291, "uuid": "296929ba-4cd1-43ec-872f-fc35f36bcab7", "value": "24576:foEA2P4lTp3YHdCvVGEEKIcsjU6UsHMdrE6Jv3oqriYg1Ai4JhHo:fHA2PYp3MdCvMXvjxUsHcJv3fo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771510291, "uuid": "b0f5bb90-a79e-4fed-91fa-d340a18b08a4", "value": 1764352, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510291, "uuid": "5a353660-a9f7-4f81-bf6b-03a1862b115b", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a545d48f-0d9d-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771510615, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771510615, "uuid": "517a0f7b-32c2-461c-9645-65a22e619d58", "comment": "Malware payload", "value": "664c52be29d29c517f4ff088b7efc120", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771510615, "uuid": "0ba69cac-5756-4fe4-b71c-3ad72ea914cd", "comment": "Malware payload", "value": "138a75f0da2082c6745ba945ffcb6b44cfd559fa8f2eab2d611ab425742498c6", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510615, "uuid": "5cec20be-e6c9-4b89-9688-fce15006cca1", "value": "T1878309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510615, "uuid": "e9bea33f-ecc9-4274-9c37-aeef0781f266", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnjWaJVN/:XEKltp9txAX/yr2pbjWgVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771510615, "uuid": "72f54a54-58d1-4652-8685-785d94bf3eab", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510615, "uuid": "59d19061-0a16-4a89-8282-2f2452ef6275", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "716868e4-0d9e-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771510958, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771510958, "uuid": "06fc2bfb-5e85-4fec-9694-a98d5ee9e4a5", "comment": "Malware payload (Mirai)", "value": "89c70644b9ab482e77eaa3b4d18d2bb2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771510958, "uuid": "bb5e75d8-3ee5-4ade-a8cc-b2f2f16283e1", "comment": "Malware payload (Mirai)", "value": "11c45ff6e309f5d8108ac2c2596df1eaa0b5d077e624ae0e16578272a35724ae", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510958, "uuid": "3cd7c694-50f9-4388-8a95-1af73e45b624", "value": "T112A3299ABC85C602C5E2A1F2FB1E51CD371643B8E3E67147CD18AB29674F8670E3B2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510958, "uuid": "afe55716-feaf-48f5-be93-73bb2ce990b6", "value": "1536:E4I6S0ZNrv97r5f4tCxKpvq5cm2gqCbqRWw5Wv2Db+R:E4I6lrV7SkxKpvq5cC2RLM2D", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771510958, "uuid": "60969d0f-4860-4eb5-a60b-3b759fab0072", "value": 103820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510958, "uuid": "cc64314c-a31d-462b-8ced-fce5c1609bfe", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce2f1803-0dba-11f1-8369-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1771523139, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523139, "uuid": "6fb0ab81-cfa5-4918-8e64-c3656736d1c1", "comment": "Malware payload (Mirai)", "value": "3b368d0391b5d08a41045f1fa46e8fd4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523139, "uuid": "e859bfc4-a425-40ed-afe7-a60f04f8fb4c", "comment": "Malware payload (Mirai)", "value": "9e84d6dd666f2a8cf5071358d30c159925f85e1231e446cdb7818bd7ddff5ad2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523139, "uuid": "7dcad9fe-82c9-49b0-b85b-c8c6610198e2", "value": "T16AF2D164C1E9AA81EEFE9CA20CD642C33F65DA85BC33CD5979449F02EA02053579EC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523139, "uuid": "0e93e419-674b-4be5-891a-8ca4be14cf8b", "value": "768:UfnHNw10bcZpWKJo5A0k7gK6VoMAGP2b7PM84uVcqgw0X7JkmWx:UxwZpu5A0k7grVoBhb7PM84u+qgw09o", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771523139, "uuid": "d28fb378-00f2-4570-96e8-eee52cb9c223", "value": 35808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523139, "uuid": "8d31b50a-ed26-4e6e-a8f6-0abce4b17e97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "489e00a9-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771523345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523345, "uuid": "bad6e2e2-58ee-45f3-bdd3-cf69c8b2abef", "comment": "Malware payload", "value": "cc65e4b18850c64f0cea41a82b105c33", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523345, "uuid": "4a10758e-c4d2-44f0-86ca-782a243d8bb8", "comment": "Malware payload", "value": "35ac7885ba6085601822e938e8b102bcb0c9d90a35cd25fc3b3d18d93ef3e58d", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523345, "uuid": "96d3660c-baa2-4b9a-b509-71e9a239db70", "value": "T1682423A62DB4C5A4C5BD99BA37CA91C9C1C3FE0A6A72AF763BC1C88D41BF404440E5", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523345, "uuid": "41d0e51a-4a90-4b8b-9031-c308996ba022", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523345, "uuid": "274ebdc6-3813-4ead-ac95-780d9e27903b", "value": "6144:SoLVqwxmhbGPiHqRAVlfTjofo5J9k8bGwu29QsGk1f5TVMdnQcR:SAqwSbCvmVdooHbC2JGk1fU2cR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771523345, "uuid": "bc85214e-79b7-4453-bd3d-f302bf7cac1b", "value": 223744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523345, "uuid": "36df64d2-6961-4b9b-899a-c2cde33f3c47", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771523589, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523589, "uuid": "4ab5555f-33ac-41f6-ab1b-49bd85b8bc48", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523589, "uuid": "664c9448-8372-4306-ae17-4db554da7f2d", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523589, "uuid": "6166cd93-e5c5-40db-bced-e56305b5870f", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523589, "uuid": "4150af86-6a2e-45f2-b593-2efab0bc7830", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771523589, "uuid": "42ff021d-de36-44ad-8e9a-5ab0c8e5c913", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1771523590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523590, "uuid": "68fef4ac-e245-4fd7-ae29-888b30627cb1", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523590, "uuid": "28f6f944-6eed-4cc6-8e73-2d0bfa2bf5ff", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523590, "uuid": "1771a47b-9617-4dee-b156-0bac3083e21c", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523590, "uuid": "26247af0-3b61-402e-aa79-3845de2602bf", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771523590, "uuid": "bd3ee5f7-b2d7-496d-9fbf-c7bf27bae37e", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523590, "uuid": "2c0ee1f5-5e19-45fc-ab06-6d98bddd70d5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523590, "uuid": "bb567f06-8c3d-4843-9773-aa01550220b3", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1771523590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523590, "uuid": "7958bae5-6c9d-4a65-bf14-6ddca0393419", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523590, "uuid": "995910d1-ad87-4065-a9ac-fa7454d008b1", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523590, "uuid": "d889418c-dbb0-404a-b7e1-f5d440f55b84", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523590, "uuid": "af44823d-2232-4c7c-a926-0e209660379a", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771523590, "uuid": "6ec901a3-6a1a-433e-93d1-ee565c125361", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523590, "uuid": "9ab61aaa-2155-41de-abbb-c40ea753788d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523590, "uuid": "701a77ce-f5e3-444a-9f23-0fda5a8ac36f", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fc717a7c-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771523647, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523647, "uuid": "3bde3e13-a18a-4c23-bfe9-799604b2854c", "comment": "Malware payload", "value": "fa10a77b0859b6672215bfb2f643008a", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523647, "uuid": "7a709a61-d0a5-4f10-9169-63e0f4c801ef", "comment": "Malware payload", "value": "b6e10e39506ae93e7868bd5fee74530e4bbb64270a2268dc0d5d4d4876ace2f8", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523647, "uuid": "75d83989-295e-46ba-a73a-6ec83dd45efd", "value": "T12D34CF868E8987D13BB9FD95780E990476A8F0DC45E4C72CC90B2D55A0D1FEBCCFA9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523647, "uuid": "9e8cda0b-753e-4ff8-8f47-644039a0861c", "value": "6144:GolJ2MttBPok4Fiy+ahaSiCa+7G8fHiuCoXnes:GolJ2MttWknahUCFG8KJW1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771523647, "uuid": "fdccfbdf-2308-4527-9f18-a76c3b55c043", "value": 239688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523647, "uuid": "58d889ee-5ed9-4b6c-a54f-b0fe5431acff", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71485223-0dc1-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771525990, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771525990, "uuid": "6e6053a2-30a9-4e91-9c95-b9657cc2259e", "comment": "Malware payload", "value": "737edcee199dee2c2004b06015039ef5", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771525990, "uuid": "96beb706-4663-452f-b970-b4d70971e7a6", "comment": "Malware payload", "value": "06f42fa9e9d8f0c01a7c560490ea71e4cc582069527a5336cdfc299ed1e67c32", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771525990, "uuid": "df1e4f02-af1f-4583-8bb9-537ba5f970b4", "value": "T1C4871212B9AD16B9C5FAE2388469A211B67238650331BBC71BE8157B1F376D46F3F3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771525990, "uuid": "1019c6de-401f-4b43-ad0c-48cb3e192eaf", "value": "1f74bdd8275d1c99b371f4a5243e6cb0", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771525990, "uuid": "eb6590a6-0b0f-4772-ad68-d944a4b858d8", "value": "786432:Ti51FLXqrRtb/S/N1ILX3JtUpTbLYH4Baj3SWL:251NqrvbY1u3HUxbQ3R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771525990, "uuid": "c28121d6-899c-4bb8-a5dd-4bce9b33bdec", "value": 37245952, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771525990, "uuid": "e31d6e58-7690-4861-89ec-759658bbfb0a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771526895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771526895, "uuid": "8a51ccc6-0bf8-4d51-8efe-7aa74bfaf8a0", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771526895, "uuid": "161c9139-fbdd-403f-87de-cac3701d0185", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771526895, "uuid": "1fffb28e-8224-40d8-8341-89c09719712e", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771526895, "uuid": "f3204e50-edf7-4cc7-b7b4-41c22cfe1e5c", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771526895, "uuid": "6f9cd3ee-87d7-4c1a-86b6-2819dd2ac4ae", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ebbe57bd-0f08-11ef-ab08-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1771528680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528680, "uuid": "b5ec6901-9850-4cad-a27c-74ecf105bd80", "comment": "Malware payload (CoinMiner)", "value": "a9d4007c9419a6e8d55805b8f8f52de0", "object_relation": "md5", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528680, "uuid": "e5b18b2a-055c-4503-9d50-43b05840568f", "comment": "Malware payload (CoinMiner)", "value": "5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fca", "object_relation": "sha256", "Tag": [ { "name": "av.scr", "colour": "#7d8c5a", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "miner", "colour": "#a3d969", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "Video.scr", "colour": "#6d6592", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771528680, "uuid": "22d372fe-7485-4d5d-befc-7190b4e0a24f", "value": "T13F563355F0405826F039107A34F988A2B07DFC724B7559CBB3A83E761E353E8267DA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771528680, "uuid": "eb6cbd37-8471-433e-bc0d-9200b15bbb43", "value": "91ae93ed3ff0d6f8a4f22d2edd30a58e", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771528680, "uuid": "bb2cc593-a3aa-441d-95e5-1952bfd6081e", "value": "98304:RLVSThOfTCiFBXmfFs+JMHpCVoR8oMEOJ6Ty3RvX+jb5jC3ajz4F4VRc:HBfTCiUswVSLOJgyBGv5jGQW4VR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771528680, "uuid": "8781d3ed-be22-4d5c-be4e-a1c61409d2fd", "value": 6271268, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771528680, "uuid": "4ba37ae8-ffb2-4416-b8ce-e463a3f2b933", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2843d226-7fdb-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1771531840, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531840, "uuid": "97dcf181-01f5-4204-9cf7-2c87c2bf5d4c", "comment": "Malware payload", "value": "5ea3839ef4effebf0c57e18742d1d284", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531840, "uuid": "182102ea-208f-45a1-93a2-0c486f3476c0", "comment": "Malware payload", "value": "64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771531840, "uuid": "669e4e12-ffe8-453b-8039-9cea3874b4d6", "value": "5A831229135414EAD62681F1D3FD1F84AD591F69CEE2EC157C12BC99EE333AD2CC2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771531840, "uuid": "dd82a6e7-a907-4248-ac7e-eaba3d1b149a", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uo:yYI0ARqw1qAEv7UIFM8oJorFquyjkRke", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771531840, "uuid": "ec2f1551-3bcf-4cd0-8f81-4d1243f3cbfa", "value": 83984, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9601765c-0dd0-11f1-8369-82aee05be84a", "comment": "Malware payload", "timestamp": 1771532494, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771532494, "uuid": "eeff1e96-6cf8-4787-a5ce-a99be581d7a8", "comment": "Malware payload", "value": "19bb0e2e2affaaa53bdaf27998d292eb", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771532494, "uuid": "98394410-b133-4cda-8ac1-e60175689365", "comment": "Malware payload", "value": "71a61ac678e6f0c98fa9a44639e9c0d3769d05a1e6a5a65f8b7247ee72357bb5", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-Stealc", "colour": "#ffd656", "exportable": true, "hide_tag": false }, { "name": "sosokenota", "colour": "#504c6f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771532494, "uuid": "0bcc9768-fc08-4741-9af2-f13bf36e6959", "value": "T15F3633167BD297B0E21129B08E643FB106F1EF682F79929718E0775F5C707A1863D2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1771532494, "uuid": "57d77c53-c055-4a02-93df-25d9948c1651", "value": "f6baa5eaa8231d4fe8e922a2e6d240ea", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771532494, "uuid": "69415844-335c-4d4e-9ba1-520d58fd63c0", "value": "98304:MH5OV+mPOPF5mL4+3paqGfibiVybtotnqwNUCcUg0NG:MHUVLJLxZaPKGVybtoAwNUCFgeG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771532494, "uuid": "e924892a-d6bd-4a0c-b0b4-b4664a2d8c90", "value": 4900424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1771532494, "uuid": "6d0d1eeb-0b17-4c7c-9423-e667b2c1335d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0a29e50-7fd8-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1771545429, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1771545429, "uuid": "70cce558-6301-4bc9-9af4-b252791698c8", "comment": "Malware payload (Hajime)", "value": "9b6c3518a91d23ed77504b5416bfb5b3", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1771545429, "uuid": "857b1c35-4385-4bb5-939b-d64fc129b306", "comment": "Malware payload (Hajime)", "value": "a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "botnetofthings", "colour": "#afe480", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "ddos-bot", "colour": "#52e413", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "hijame", "colour": "#81ec61", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "trojan", "colour": "#3b1ba6", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1771545429, "uuid": "0da7ed7c-4b00-4bd7-badb-f3bfb8c2f995", "value": "6D7312E017B517CC1371A8353BED205E9128223972AE35302E97528DF957703BAB2DBE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1771545429, "uuid": "402e951d-1dec-4f14-8392-b6dc75d416ae", "value": "1536:87vbq1lGAXSEYQjbChaAU2yU23M51DjZgSQAvcYkFtZTjzBht5:8D+CAXFYQChaAUk5ljnQssL", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1771545429, "uuid": "7557e0c2-83f0-48e0-81d1-5a8cbccefb20", "value": 80280, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771459896, "uuid": "8dec05e0-0d27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.183.230:34444/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771459934, "uuid": "a4af26e9-0d27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.211.138:42123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771459934, "uuid": "a50fda73-0d27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.131.107:59763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771459935, "uuid": "a51d5abb-0d27-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.56.208:53350/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771460416, "uuid": "c45fb24f-0d28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.77:40551/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771460417, "uuid": "c49285ba-0d28-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.200.152.233:35119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771461073, "uuid": "4baf6bc1-0d2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:54213/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771461125, "uuid": "6a83b0c4-0d2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fruitcase.plum63box.coupons/pack_status", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771461256, "uuid": "b8df1d0a-0d2a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.121.186:47622/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771461494, "uuid": "467df8e3-0d2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.65.77:40551/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771461615, "uuid": "8e7db546-0d2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.56.208:53350/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771461668, "uuid": "ae3b3892-0d2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.209.33:57585/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771461737, "uuid": "d7c4625c-0d2b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.183.230:34444/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771461907, "uuid": "3ce17c2b-0d2c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://redplum.plum63box.coupons/item_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462343, "uuid": "4096ff31-0d2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.91.96:42854/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462403, "uuid": "6479ed46-0d2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.102.4:55550/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462507, "uuid": "a285952b-0d2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://boxstore.plum63box.coupons/batch_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462586, "uuid": "d17e3b60-0d2d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.101.226:49616/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462867, "uuid": "79105986-0d2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweetstock.plum63box.coupons/unit_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771462876, "uuid": "7e617d3b-0d2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.61:54213/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463002, "uuid": "c9804484-0d2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.66.43:49576/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463062, "uuid": "ed685677-0d2e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.164.204.174:39186/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463119, "uuid": "0f68144a-0d2f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.91.96:42854/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463361, "uuid": "9f72cb9a-0d2f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.209.33:57585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463361, "uuid": "9f7743bd-0d2f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.28.60:33922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463408, "uuid": "bb4a9e18-0d2f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.32.203:59942/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771463965, "uuid": "0741085d-0d31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.148:37627/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771464319, "uuid": "da775eb8-0d31-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.148:37627/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771464439, "uuid": "22023a4d-0d32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.15.52:59268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771464730, "uuid": "cf61a120-0d32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://quickpath.fastlane.coupons/speed_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771464798, "uuid": "f81cf6ec-0d32-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.28.60:33922/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771464906, "uuid": "382653cb-0d33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://roadrunner.fastlane.coupons/track_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465098, "uuid": "aaf3121c-0d33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.66.43:49576/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465099, "uuid": "ab95218e-0d33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.25.232:57721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465145, "uuid": "c6feec8d-0d33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drivelogic.fastlane.coupons/route_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465218, "uuid": "f2960f07-0d33-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.232.251.237:42420/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465390, "uuid": "58eae1f6-0d34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shiftpoint.fastlane.coupons/gear_data", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465403, "uuid": "607e2ba5-0d34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.142.179:54382/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465578, "uuid": "c90b492e-0d34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.195.57:58222/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465581, "uuid": "ca73657b-0d34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.174.154:52999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465627, "uuid": "e6225d49-0d34-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shipfresh.mint5ship.coupons/load_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465691, "uuid": "0c58c6e3-0d35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.192.27.222:33659/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465697, "uuid": "0ff8443f-0d35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.32.203:59942/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465820, "uuid": "59144da9-0d35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:56879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771465985, "uuid": "bb7623b1-0d35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenleaf.mint5ship.coupons/cool_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771466056, "uuid": "e5a63c95-0d35-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.19.101:59032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771466240, "uuid": "538cb656-0d36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.25.232:57721/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771466466, "uuid": "da47e78a-0d36-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://swiftcore.cloudbridge.city/data_sync", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771466840, "uuid": "b8d4d34f-0d37-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.174.154:52999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771467066, "uuid": "3fba8fef-0d38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://linkflow.cloudbridge.city/stream_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771467079, "uuid": "479a3528-0d38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:56879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771467365, "uuid": "f24dcc48-0d38-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://openport.cloudbridge.city/node_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771467549, "uuid": "5fc41d52-0d39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastgate.cloudbridge.city/entry_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771467727, "uuid": "c9c542b8-0d39-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenleaf.natureway.city/plant_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771467980, "uuid": "60747c25-0d3a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.180.35.139:46132/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771468270, "uuid": "0dae95eb-0d3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.194.83:34828/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771468404, "uuid": "5d497949-0d3b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.187:47223/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771468810, "uuid": "4f22ece4-0d3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.224.59:54323/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771468872, "uuid": "745df7a6-0d3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.3.161:50670/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771468935, "uuid": "99c3b444-0d3c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.3.161:50670/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771469358, "uuid": "95cfc227-0d3d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.185.170:44510/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771469537, "uuid": "00a28295-0d3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.17.254:36468/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771469780, "uuid": "91704c96-0d3e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.199:37355/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771470497, "uuid": "3cf8f598-0d40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.185.170:44510/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771470793, "uuid": "ed37e148-0d40-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.152.187:47223/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771470913, "uuid": "34942a9e-0d41-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.121.199:37355/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771471095, "uuid": "a120d94d-0d41-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.47.9:53892/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771471698, "uuid": "08aa0ce0-0d43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://72.49.193.91:2138/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771471699, "uuid": "093fd2aa-0d43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.21.92:34519/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472110, "uuid": "fe2da114-0d43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472110, "uuid": "fe57e7fa-0d43-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472116, "uuid": "01a385bf-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472116, "uuid": "01a4918d-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472116, "uuid": "01a4a198-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472116, "uuid": "01a65589-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472116, "uuid": "01a77cd8-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472116, "uuid": "01a9802d-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472116, "uuid": "01b9bfb2-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472116, "uuid": "01bb6d80-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472117, "uuid": "0246facd-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472117, "uuid": "02472355-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472117, "uuid": "02473723-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.121.84.49/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "030b9e79-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.135/bot.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "030ec3e2-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.135/bot.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "0312c77f-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.135/bot.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "0321d096-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.135/bot.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472118, "uuid": "032c2c41-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://150.241.65.135/bot.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472289, "uuid": "691ee710-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.32.111.212:45817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472537, "uuid": "fc9d4012-0d44-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.224.59:54323/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472647, "uuid": "3e9bd03d-0d45-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.22.57:56532/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472715, "uuid": "66a76bdc-0d45-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.162.143:35844/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771472897, "uuid": "d38fef02-0d45-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.85.109:50203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771473730, "uuid": "c4047871-0d47-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:48232/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771473849, "uuid": "0ae86f89-0d48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.88.201:56735/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771473975, "uuid": "56183269-0d48-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://95.32.111.212:45817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771474330, "uuid": "29964315-0d49-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.160:37764/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771474634, "uuid": "def1b4cf-0d49-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.252.147:60671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771475235, "uuid": "453387f9-0d4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.42.88.201:56735/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771475345, "uuid": "86aa7078-0d4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://earthmap.natureway.city/area_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771475471, "uuid": "d185ce30-0d4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.162.143:35844/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771475527, "uuid": "f2fcaff7-0d4b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wildtrack.natureway.city/trail_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771475837, "uuid": "aba0860d-0d4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.160:37764/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771475896, "uuid": "ced7ce8c-0d4c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.82:44503/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771476316, "uuid": "c93e8e82-0d4d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.56.95:45606/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771476737, "uuid": "c44efff1-0d4e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.74.239:47249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771476785, "uuid": "e105340e-0d4e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://riverflow.natureway.city/water_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771476860, "uuid": "0d94acd1-0d4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.82:44503/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771477093, "uuid": "98996340-0d4f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.56.95:45606/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771477867, "uuid": "65fc0d16-0d51-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.167:37910/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771477869, "uuid": "669fc45d-0d51-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.60.131:47177/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479017, "uuid": "1355d6bd-0d54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.251.221:58200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479127, "uuid": "548f1425-0d54-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pxkpoxt8.cabinetslyuka.digital/?=check&&actmn=GenqleEOclChwheN", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479556, "uuid": "547d3aea-0d55-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.85:59141/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479618, "uuid": "79a4f00c-0d55-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.195.97:58049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479785, "uuid": "dd0f1457-0d55-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://brightsky.starpoint.city/orbit_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479909, "uuid": "269f96d6-0d56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.167:37910/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479909, "uuid": "26bdb8e0-0d56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.60.131:47177/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771479979, "uuid": "505c67a5-0d56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.103.36:52268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771480097, "uuid": "9701c10e-0d56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.114.33.194:44091/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771480208, "uuid": "d8d32eb9-0d56-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldlight.goldstar.coupons/beam_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771480336, "uuid": "25481fee-0d57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.210:37853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771480337, "uuid": "25d9f986-0d57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.103.197:45761/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771480629, "uuid": "d43ce3cf-0d57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.103.197:45761/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771480686, "uuid": "f60dbf7f-0d57-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://brightsky.goldstar.coupons/star_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771480866, "uuid": "612a7283-0d58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shinepoint.goldstar.coupons/glow_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481054, "uuid": "d16660d1-0d58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.2.210:37853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481054, "uuid": "d16e4a5c-0d58-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.20.85:59141/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481346, "uuid": "7f70450e-0d59-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://spacecore.goldstar.coupons/orbit_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481665, "uuid": "3d3c1154-0d5a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.90.51:54933/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771481708, "uuid": "5721b12e-0d5a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://boxlayer.box1fig7.coupons/stack_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482365, "uuid": "def7034f-0d5b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://figstore.box1fig7.coupons/item_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482377, "uuid": "e5c427bd-0d5b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.254:49986/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482544, "uuid": "49a6189d-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://allcheat.netlify.app/pbExecuter.exe", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482550, "uuid": "4d046c83-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Esad-code/execccc/releases/download/exxxxxxecc/Executor.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "fake-git", "colour": "#bdb17a", "exportable": true, "hide_tag": false }, { "name": "FakeCheat", "colour": "#af27c1", "exportable": true, "hide_tag": false }, { "name": "github", "colour": "#2472fb", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482550, "uuid": "4d39d85a-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kodimom.lol/downloads", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: bluys", "colour": "#d0fede", "exportable": true, "hide_tag": false }, { "name": "pw-bluys", "colour": "#5a7771", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482553, "uuid": "4e9535f9-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://roundpack.box1fig7.coupons/size_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482573, "uuid": "5a85ea40-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://app-clash.com.cn/clash0.20.39.zip", "Tag": [ { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false }, { "name": "Wacatac", "colour": "#189036", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482578, "uuid": "5ded4031-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.clash-github.com.cn/downloads/windows/ClashSetup.zip", "Tag": [ { "name": "agent", "colour": "#cb166c", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Etset!rfn", "colour": "#d21580", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482619, "uuid": "75f7526f-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://clash-org.com.cn/Clash.for.Windows.zip", "Tag": [ { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Kepavll!rfn", "colour": "#7c40da", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482623, "uuid": "788151ce-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunetes.technick.sbs/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482624, "uuid": "78f81f37-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyxes.technick.sbs/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482624, "uuid": "792e109b-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://deusxeno.ws/%D0%92%D0%BEotsta%D1%80pe%D0%B3%D1%83%D0%BEssUI.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: ryos", "colour": "#51c7ee", "exportable": true, "hide_tag": false }, { "name": "pw-ryos", "colour": "#201b00", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482624, "uuid": "795ce5dd-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.172.154.218/check1.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482638, "uuid": "81b27f34-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.227.196:43372/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482654, "uuid": "8ac56f94-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lunetes.funnyhelp.com/LunX.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: lunex", "colour": "#cb4cba", "exportable": true, "hide_tag": false }, { "name": "pw-lunex", "colour": "#A9A8CD", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482665, "uuid": "9153abd3-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://cyxes.pavingny.com/Cyrex.zip", "Tag": [ { "name": "archive", "colour": "#9510c9", "exportable": true, "hide_tag": false }, { "name": "compressed", "colour": "#048a87", "exportable": true, "hide_tag": false }, { "name": "Password: cyrex", "colour": "#c7fa8e", "exportable": true, "hide_tag": false }, { "name": "pw-cyrex", "colour": "#d542d1", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482670, "uuid": "9451983f-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.172.154.218/check.sh", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd1f7fd1-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.ppc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd20886e-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.mpsl", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd20aa46-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.i468", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd20f14b-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.x86_64", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd210371-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.x86", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd211636-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.m68k", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd2117ec-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.arm", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd2121bf-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.arm5", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd213092-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.arc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd277f37-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.vame.be/css/WkUymgOgGn151.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "rat", "colour": "#0c02ad", "exportable": true, "hide_tag": false }, { "name": "RemcosRAT", "colour": "#779e3a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd2c4f6c-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.spc", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd2c5677-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.mips", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd361209-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.i686", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd37a066-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.arm7", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd3c2679-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.arm6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482846, "uuid": "fd3c2c33-0d5c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://165.22.58.103/windyloveyou/windy.sh4", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771482916, "uuid": "2708ebe8-0d5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.205.90.51:54933/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483207, "uuid": "d4e0f6a5-0d5d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://baseflow.box1fig7.coupons/unit_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771483401, "uuid": "485813c2-0d5e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.59:46993/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484049, "uuid": "cab9cd81-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://desertroad.sandwave.coupons/dune_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484055, "uuid": "ce1cf112-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484055, "uuid": "ce1cf4cc-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484055, "uuid": "ce1d00f8-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484056, "uuid": "ce5daaa0-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.245.203.34/ambatukam/rizzx.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484059, "uuid": "d03b9ed2-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.172.154.218/Error84", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484059, "uuid": "d03da614-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.172.154.218/syst3md", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484060, "uuid": "d11ef7b6-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484060, "uuid": "d11f0b24-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484060, "uuid": "d1218d1e-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.172.108.230/bins/mynode.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484060, "uuid": "d122fa49-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484060, "uuid": "d122fd0b-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484060, "uuid": "d122ffe1-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484060, "uuid": "d123019c-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484060, "uuid": "d1230a45-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.67.138.196/bins/mynode.powerpc-440fp", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484060, "uuid": "d123f81e-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://157.230.43.57/ambatukam/rizzx.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484064, "uuid": "d3300214-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.49:41681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771484133, "uuid": "fc71456b-0d5f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://5.59.107.59:46993/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771485427, "uuid": "ff9db093-0d62-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drywind.sandwave.coupons/heat_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771485559, "uuid": "4e7e883f-0d63-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.122.254:33911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771485872, "uuid": "08fb7608-0d64-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.92.93:55765/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "1dde1fad-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "1de5037c-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "1de50782-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "1de51e25-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486336, "uuid": "1de520ab-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486337, "uuid": "1df25e90-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486341, "uuid": "20a547c6-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "24858fc8-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "24892a1c-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "248af382-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "24903cc3-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486348, "uuid": "2491a3ec-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486349, "uuid": "251e9be2-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486397, "uuid": "41ec61e1-0d65-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.236.64.121/systemcl/x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486814, "uuid": "3ab3b760-0d66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldensand.sandwave.coupons/area_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486824, "uuid": "40720c70-0d66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.252.147:60671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771486942, "uuid": "86e8ac82-0d66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.244.219:49783/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771487122, "uuid": "f20ed852-0d66-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.74.128:34000/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771487241, "uuid": "38e8435f-0d67-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.227.196:43372/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771487407, "uuid": "9bf2b909-0d67-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://warmtrack.sandwave.coupons/dust_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771487424, "uuid": "a65c68a3-0d67-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.1.254:49986/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771487725, "uuid": "59ba9cca-0d68-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.93.23:38119/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771488067, "uuid": "25785f97-0d69-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pearbox.pack12pear.coupons/weight_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771488438, "uuid": "02a57941-0d6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.244.219:49783/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771488738, "uuid": "b50a592f-0d6a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.236.74.128:34000/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489159, "uuid": "b07f74a0-0d6b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.91.195:42895/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489208, "uuid": "cd50b94e-0d6b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fruitpack.pack12pear.coupons/sort_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489457, "uuid": "622b71fa-0d6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.182.72:50233/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489515, "uuid": "845f41de-0d6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.97:59590/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489566, "uuid": "a30aa20e-0d6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://www.safebrowse.io/warn.html?url=http://localstore.pack12pear.coupons/area_ref&token=6336a9ae", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489629, "uuid": "c8529b82-0d6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://localstore.pack12pear.coupons/area_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489700, "uuid": "f298c860-0d6c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.44:42917/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771489870, "uuid": "57d321c0-0d6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenlabel.pack12pear.coupons/code_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771490108, "uuid": "e608ea61-0d6d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ironcore.ironstar.coupons/metal_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771490410, "uuid": "9a1b2362-0d6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://steelsync.ironstar.coupons/bolt_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771490413, "uuid": "9b6baaee-0d6e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.24.11:49524/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771490826, "uuid": "91c756e9-0d6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://powerbeat.ironstar.coupons/press_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771490898, "uuid": "bcf6d84a-0d6f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:59369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771491067, "uuid": "21af38d1-0d70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hardlink.ironstar.coupons/node_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771491318, "uuid": "b75fe9a4-0d70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.93.97:59590/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771491321, "uuid": "b8e361bd-0d70-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.238.44:42917/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771491497, "uuid": "21d0a163-0d71-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.50.139:41396/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771491667, "uuid": "8725a94c-0d71-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://darksky.eastmoon.coupons/view_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771491967, "uuid": "39aa194a-0d72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://eastorbit.eastmoon.coupons/space_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771491979, "uuid": "40d338aa-0d72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.67.92:55531/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492212, "uuid": "cbc370f7-0d72-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.249.140:59369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492327, "uuid": "104d3802-0d73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://glowpoint.eastmoon.coupons/lunar_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492460, "uuid": "5fbef451-0d73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.224.21.207:54257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492627, "uuid": "c34c4464-0d73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/NLFqfhrzQIZ102.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492627, "uuid": "c34c57a1-0d73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/JgEFohuTKGa3.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492627, "uuid": "c3914aef-0d73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://mintbase.ship48mint.coupons/cargo_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492628, "uuid": "c3e001d1-0d73-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.245.95.24/yomEEuQvIO166.bin", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771492817, "uuid": "345b0895-0d74-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.232.231:55657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493232, "uuid": "2bb94014-0d75-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldship.ship48mint.coupons/vessel_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493299, "uuid": "53c20563-0d75-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.5.67.92:55531/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493648, "uuid": "23e8f6b3-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://trackpolicy.xyz/files/REMOTE_START_BLANK_SCREEN.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493648, "uuid": "23fff9fb-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://trackpolicy.xyz/files/REMOTE_STOP_BLANK_SCREEN.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493648, "uuid": "2413d6e0-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://trackpolicy.xyz/files/CHECK_SERVICE_STATUS.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493650, "uuid": "24e7a61c-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://trackpolicy.xyz/files/SystemUpdateServiceWithTrigger.ps1", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493656, "uuid": "28db4cbb-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://trackpolicy.xyz/files/JOSMB.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493663, "uuid": "2cd61935-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://trackpolicy.xyz/files/11.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493663, "uuid": "2d17fb2d-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://trackpolicy.xyz/files/SMB653CT56JO.msi", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493664, "uuid": "2d32917b-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://trackpolicy.xyz/files/GS7SystemService.exe", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493769, "uuid": "6bea6665-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1RpUIW7xtI9aLyo5kw-7niMBw1qejdwih", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493828, "uuid": "8efd8cb4-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://thecommunitynetwork.free.nf/arquivo_20260218215302.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493828, "uuid": "8f235d42-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1cY31El0h0LSpCI6YWicJiL3iliV4Ayxj", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493829, "uuid": "8fa6986e-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://almacensantangel.com/ENCRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493831, "uuid": "9117c536-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://famba-co.com/images/optimized_MSI.png", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771493887, "uuid": "b2479bbf-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://almacensantangel.com/ENCRYPT.Ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494007, "uuid": "f9e6ce39-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://eishin-kk-co.asia/dev/ENCRYPTEDS.ps1", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false }, { "name": "SnakeKeylogger", "colour": "#79f359", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494007, "uuid": "fa043c7d-0d76-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://shieldns.my/1MnBwd", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "VIPKeylogger", "colour": "#7632a5", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494188, "uuid": "65a9c97a-0d77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=15M1z1HYA2lfktOlFiddvyPQN1zCAgQAO", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494197, "uuid": "6b0948bf-0d77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:44440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494247, "uuid": "88d2d044-0d77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1Qe0GjnodUt91R20XjervB7rBIibb8JFg", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494311, "uuid": "af1c95b8-0d77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1-qKojjjspvV3x__J0CzuMKh_afO8JLct", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494311, "uuid": "af2143f0-0d77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/uc?export=download&id=1ebW5Jd94VciuqKug2mUdM5LOQ7tfpB3w", "Tag": [ { "name": "encrypted", "colour": "#726a10", "exportable": true, "hide_tag": false }, { "name": "GuLoader", "colour": "#9937d3", "exportable": true, "hide_tag": false }, { "name": "PhantomStealer", "colour": "#aaa46a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494315, "uuid": "b19687f7-0d77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia600802.us.archive.org/6/items/optimized_msi_20260218_1453/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494367, "uuid": "d0a9e1f2-0d77-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://eishin-kk-co.asia/dev/ENCRYPTED.ps1", "Tag": [ { "name": "AgentTesla", "colour": "#71a933", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494608, "uuid": "6017ab69-0d78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://au72nuxzv2.ufs.sh/f/4LhV5B1sDCwIrsetlLYKXE4gwWVSzU8Dck1rs5tJYqhnmpx6", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494609, "uuid": "60e4c2bc-0d78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://miriamgualda.com.br/oga/freshone.js", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494610, "uuid": "616cc1d7-0d78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://miriamgualda.com.br/trumis/aaSefFp.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Encoded", "colour": "#ef1c92", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494787, "uuid": "ca8a2b39-0d78-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshroute.ship48mint.coupons/dock_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494965, "uuid": "350a779f-0d79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/file/d/13cKZ5lk3JS4h7YeRD8ONFArjiQjgGKA3/view?usp=sharing", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771494971, "uuid": "38327a27-0d79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://drive.google.com/file/d/1SsbgkhpaxxgDuK_r44Ii-41ou4JBXPwq/view?usp=sharing", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771495100, "uuid": "852c69e6-0d79-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.250.184:44224/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771495517, "uuid": "7de01db7-0d7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.103.160:49947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771495626, "uuid": "beb96178-0d7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastpack.ship48mint.coupons/item_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771495640, "uuid": "c6fbfa3a-0d7a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.224.21.207:54257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771496227, "uuid": "24d16893-0d7c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kiwitalk.ship46kiwi.coupons/call_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771496538, "uuid": "de7c22f1-0d7c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.8:36197/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771496646, "uuid": "1f18a9e5-0d7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://greenbird.ship46kiwi.coupons/wing_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771496888, "uuid": "aedc2fbb-0d7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://dynaquipautomation.com/gggfhfghgh/ConvertedFile.txt", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "DarkCloud", "colour": "#91000a", "exportable": true, "hide_tag": false }, { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771497008, "uuid": "f6c38f6c-0d7d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.169.95:51487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771497314, "uuid": "ace04faa-0d7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.184.163:58038/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771497435, "uuid": "f53db8be-0d7e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.73.7:37037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771497863, "uuid": "f3f72b5f-0d7f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.23.234:59650/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771497965, "uuid": "311462ff-0d80-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://fastkiwi.ship46kiwi.coupons/fly_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771498336, "uuid": "0e76b198-0d81-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.176.227:54886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771498514, "uuid": "78283886-0d81-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.220:44687/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771498625, "uuid": "bab1922e-0d81-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://skyline.ship46kiwi.coupons/point_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771498941, "uuid": "76a7f912-0d82-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.214.105:47476/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771499297, "uuid": "4b0c7258-0d83-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.166.23.234:59650/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771499535, "uuid": "d8ad81c5-0d83-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.56.19:34930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771499645, "uuid": "1a8b8e41-0d84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://westcoast.westwind.coupons/shore_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771499658, "uuid": "224e9f4f-0d84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.239.5:59357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771499719, "uuid": "46b576b4-0d84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.239.5:59357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771499779, "uuid": "69ff1e11-0d84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.247.98:46274/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771499826, "uuid": "868b8f21-0d84-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://strongblow.westwind.coupons/wind_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771500259, "uuid": "8844fed9-0d85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.28.220:44687/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771500323, "uuid": "ae627cb0-0d85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.185.252:43369/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771500436, "uuid": "f1ced7a7-0d85-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.13.250.184:44224/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771500794, "uuid": "c72f4ea6-0d86-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.241.112:53144/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771501047, "uuid": "5dd52ea9-0d87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.87.92:40171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771501155, "uuid": "9e78890b-0d87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.8.56.19:34930/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771501265, "uuid": "e03d3e77-0d87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://openfield.westwind.coupons/air_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771501274, "uuid": "e56bafd6-0d87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.241.112:53144/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771501274, "uuid": "e58f7d03-0d87-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.90.155:44416/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771501636, "uuid": "bd00d8f2-0d88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.33.49:41681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771501637, "uuid": "bd7814fb-0d88-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.114.120:43989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771501996, "uuid": "93f18e1a-0d89-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:44301/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771502107, "uuid": "d615d5df-0d89-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://172.86.68.175/UmQm572CK.lnk", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771502168, "uuid": "fa42af07-0d89-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.185.252:43369/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771502651, "uuid": "1a448db2-0d8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.105.204:40270/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771502714, "uuid": "3f814e8e-0d8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://108.168.10.70:48658/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771502897, "uuid": "acabee7d-0d8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.202.90.155:44416/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771503009, "uuid": "ef6aec5b-0d8b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:40107/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771503127, "uuid": "359398b4-0d8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://stormtrack.westwind.coupons/gust_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771503138, "uuid": "3c503632-0d8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.171.107:57930/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771503250, "uuid": "7f2fca97-0d8c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.110:48246/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771503613, "uuid": "57950962-0d8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:44440/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771503728, "uuid": "9c4de300-0d8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:44301/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771503848, "uuid": "e3556027-0d8d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pearline.pear7pack.coupons/tree_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771503977, "uuid": "3069faeb-0d8e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.168:54263/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771504031, "uuid": "507437cc-0d8e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.110:48246/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771504279, "uuid": "e4407ef2-0d8e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.62:42740/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771504444, "uuid": "472014ea-0d8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7044575709/Bst08Vq.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771504567, "uuid": "9046583d-0d8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.247.98:46274/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771504651, "uuid": "c242d2fb-0d8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.105.204:40270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771504700, "uuid": "df9d9117-0d8f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:58333/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771504810, "uuid": "212d9daf-0d90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.237:46330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771504811, "uuid": "217a3076-0d90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.169.95:51487/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771505074, "uuid": "be2d474b-0d90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.106.104:42225/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771505174, "uuid": "f9c3e020-0d90-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.168:54263/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771505346, "uuid": "6085cac8-0d91-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://sweetfruit.pear7pack.coupons/pick_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771505780, "uuid": "62e059c5-0d92-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.185.242.62:42740/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771505909, "uuid": "afce0fb4-0d92-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.8.62:56935/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771506069, "uuid": "0f543b66-0d93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.20.111:58333/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771506366, "uuid": "c0341967-0d93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://goldpack.pear7pack.coupons/box_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771506381, "uuid": "c930eb7d-0d93-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.253.106.104:42225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771506667, "uuid": "73b74a83-0d94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://farmfresh.pear7pack.coupons/crop_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771506736, "uuid": "9cd2f0e1-0d94-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.10.237:46330/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771507109, "uuid": "7b522e24-0d95-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://pub-085644fd7c304ed49d4ff78a323bd506.r2.dev/2.19anSogouExplorer.zip", "Tag": [ { "name": "Patched", "colour": "#555bfb", "exportable": true, "hide_tag": false }, { "name": "SilverFox", "colour": "#c08840", "exportable": true, "hide_tag": false }, { "name": "Trojan:Win32/Malgent!MSR", "colour": "#2b8df4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771507209, "uuid": "b6a4f50a-0d95-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://blackfire.darkfire.coupons/burn_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771507405, "uuid": "2bdbd6fb-0d96-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.8.62:56935/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771507406, "uuid": "2c3b9bac-0d96-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.0.27:38079/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771507938, "uuid": "69517731-0d97-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:40107/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771508537, "uuid": "ce524637-0d98-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.164.204.174:39186/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771508843, "uuid": "85001d2a-0d99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.166.0.236:52207/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771508903, "uuid": "a86721d4-0d99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.156.19:59245/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509018, "uuid": "ed6d18aa-0d99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.0.27:38079/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509020, "uuid": "ee577e49-0d99-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.116.15.48:49673/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509366, "uuid": "bcd72052-0d9a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotelement.darkfire.coupons/heat_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509377, "uuid": "c3100721-0d9a-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.244.1:57663/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509550, "uuid": "2a2dea28-0d9b-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://smoketrace.darkfire.coupons/ash_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509935, "uuid": "0f8a56e7-0d9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.82.97:51938/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771509978, "uuid": "294b39b3-0d9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.116.15.48:49673/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771510147, "uuid": "8e29646f-0d9c-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://coalpoint.darkfire.coupons/fuel_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771510686, "uuid": "cf1b3d3a-0d9d-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://figbranch.fig08box.coupons/leaf_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771510870, "uuid": "3ccae289-0d9e-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://smallbox.fig08box.coupons/part_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771511240, "uuid": "196c91ee-0d9f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.230.94.250:38221/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771511482, "uuid": "a9d3f8d5-0d9f-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.244.1:57663/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771511664, "uuid": "167b0100-0da0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.69.159.223:56338/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771511720, "uuid": "3763b169-0da0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:41558/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771512075, "uuid": "0b23566e-0da1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.148.233:57657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771512126, "uuid": "29a23a39-0da1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://freshfig.fig08box.coupons/farm_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771512379, "uuid": "c0947839-0da1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.174.50:36209/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771512529, "uuid": "19a0c354-0da2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.123.215:42429/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771512908, "uuid": "fbe51b9d-0da2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.215.152:41558/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771512919, "uuid": "022e55f5-0da3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.245.226:45556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771513096, "uuid": "6bed3803-0da3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.10.79.233:40811/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771513209, "uuid": "af22fdc5-0da3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://boxflow.fig08box.coupons/job_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771513402, "uuid": "2268e92b-0da4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.10.79.233:40811/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771513450, "uuid": "3efef250-0da4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://plumfield.box671plum.coupons/site_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771514169, "uuid": "eba2215b-0da5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.28.67:48879/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771514231, "uuid": "1088a9fb-0da6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.248.171:59400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771514297, "uuid": "378dd300-0da6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.174.227:51840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771514357, "uuid": "5b845726-0da6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.154.247:37461/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771514608, "uuid": "f0c12db0-0da6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.167.245.226:45556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771514799, "uuid": "62a12fc1-0da7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.26.41:48302/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771514886, "uuid": "9688c14b-0da7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavybox.box671plum.coupons/load_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771514958, "uuid": "c1635115-0da7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.65.215.0:40334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771514958, "uuid": "c18b993a-0da7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.250.26:42870/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771515252, "uuid": "70cf703f-0da8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.174.50:36209/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771515322, "uuid": "9a753c8b-0da8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.7:48584/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771515367, "uuid": "b56d99a8-0da8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://blueplum.box671plum.coupons/color_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771515429, "uuid": "daa9a0f3-0da8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.250.26:42870/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771515617, "uuid": "4aa082ca-0da9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.154.247:37461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771515676, "uuid": "6dd1adce-0da9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.2.173:52358/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771515737, "uuid": "920401e5-0da9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.141.174.227:51840/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771515911, "uuid": "f99a1f5e-0da9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.123.8:36197/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771516040, "uuid": "465efb69-0daa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.96.139.7:48584/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771516099, "uuid": "69dfadf8-0daa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.119.63:51714/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771516220, "uuid": "b1991282-0daa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.69.159.223:56338/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771516277, "uuid": "d402501a-0daa-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.140.182.72:50233/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771517168, "uuid": "e6c876fd-0dac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://stockhub.box671plum.coupons/hub_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771517181, "uuid": "ee62469d-0dac-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.157.160:56401/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771517347, "uuid": "51c180a7-0dad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://kiwitransit.kiwi9ship3.coupons/way_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771517500, "uuid": "acf39b2d-0dad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.21.243:39180/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771517597, "uuid": "e66bf38a-0dad-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.28.67:48879/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771517718, "uuid": "2efc095c-0dae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.2.173:52358/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771517777, "uuid": "51ad0b7d-0dae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.89.86:33303/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771517896, "uuid": "98b0ed1e-0dae-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.89.86:33303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771518619, "uuid": "47cfb159-0db0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.119.63:51714/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771518677, "uuid": "6a93f7db-0db0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.217.218:58664/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771518976, "uuid": "1cde2521-0db1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.27.222:43798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771519036, "uuid": "403ce989-0db1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.135.217.218:58664/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771519037, "uuid": "4138fe4c-0db1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.27.222:43798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771519146, "uuid": "81af7c9d-0db1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://oceanbird.kiwi9ship3.coupons/sea_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771519328, "uuid": "ee40af88-0db1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://portside.kiwi9ship3.coupons/dock_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771519473, "uuid": "44907a35-0db2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.253.69.126:51395/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771519519, "uuid": "606b39f7-0db2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.51.176:43036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771520166, "uuid": "e1ea69fc-0db3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://globalfruit.kiwi9ship3.coupons/ship_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771520356, "uuid": "5332545b-0db4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.158.163:36470/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771520653, "uuid": "03e11755-0db5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.122:46150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771520656, "uuid": "06102c7c-0db5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:59707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771521016, "uuid": "dc996ae7-0db5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.196.51.176:43036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771521066, "uuid": "fa8a33f7-0db5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8168605051/tPAzuIX.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771521138, "uuid": "25504876-0db6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.94.220.75:60288/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771521246, "uuid": "65891429-0db6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bluecloud.skyrain.in.net/drop_stat", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771521615, "uuid": "41c48cdb-0db7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.90:59707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771521677, "uuid": "66521dd0-0db7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.94.220.75:60288/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771521799, "uuid": "af349395-0db7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.38.158.163:36470/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771522090, "uuid": "5c6cf3f5-0db8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.85.19:49731/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771522147, "uuid": "7ed6888d-0db8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://highwind.skyrain.in.net/storm_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771522807, "uuid": "0821d040-0dba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://clearair.skyrain.in.net/view_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523016, "uuid": "8450d4bd-0dba-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.142.239:49985/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523345, "uuid": "48a5d62c-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6608710704/6url4X8.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523406, "uuid": "6d389d17-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://softmist.skyrain.in.net/humid_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523589, "uuid": "d9fa39a0-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.168.37.165:13069/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523590, "uuid": "da91e629-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.36.69:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523590, "uuid": "da96164a-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.120.220.194:46222/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523590, "uuid": "dac031c9-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.117.43.36:8000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523590, "uuid": "dafcd514-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.90.206.87:4419/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523590, "uuid": "daff1608-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.106.63.234:36880/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523591, "uuid": "db0df608-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.234.54:2004/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523591, "uuid": "db141c11-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://136.233.149.66:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523591, "uuid": "db4d82fe-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.73.169.114:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523591, "uuid": "db75873e-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://144.6.89.62:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523601, "uuid": "e12bbaf1-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.104.195.210:16214/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523601, "uuid": "e12bec45-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://37.193.243.84:54448/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523647, "uuid": "fcaf8fc3-0dbb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://111.228.4.54:4455/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523663, "uuid": "0609dde7-0dbc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://69.159.155.246:58277/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771523766, "uuid": "43a7bb9a-0dbc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.85.19:49731/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771524070, "uuid": "f8db0ff8-0dbc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.147.16:41247/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771524186, "uuid": "3e097fe2-0dbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://blueocean.deepwave.in.net/tide_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771524217, "uuid": "503175d9-0dbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.68:54123/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771524311, "uuid": "88a23f33-0dbd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.243.54:43402/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771524556, "uuid": "1a98eeba-0dbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.54.160.220:44646/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771524918, "uuid": "f200e138-0dbe-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.247.142.239:49985/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771524965, "uuid": "0e4818ac-0dbf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://darkwater.deepwave.in.net/depth_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771525091, "uuid": "59973bb2-0dbf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.49.40:34425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771525219, "uuid": "a5ca809c-0dbf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.199.36:46283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771525569, "uuid": "76768fbd-0dc0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.147.16:41247/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771525703, "uuid": "c5e71aee-0dc0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.210.230:39491/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771525934, "uuid": "4fecce15-0dc1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.143:49773/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771525990, "uuid": "7155e7c4-0dc1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://62.60.226.159/NuclearBomb.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771526110, "uuid": "b89f5ae9-0dc1-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.142.68:54123/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771526251, "uuid": "0ca3f978-0dc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.206:50931/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771526288, "uuid": "22b65838-0dc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://194.54.160.220:44646/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771526539, "uuid": "b843235e-0dc2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.253.105:59013/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771526718, "uuid": "2365efda-0dc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.204.252.240:56640/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771526787, "uuid": "4c973877-0dc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.168.230:35742/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771526895, "uuid": "8c870f6c-0dc3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.100.152:48232/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771527126, "uuid": "168499e4-0dc4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://seacurrent.deepwave.in.net/flow_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771527370, "uuid": "a7bed61c-0dc4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.248.104.143:49773/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771527700, "uuid": "6c8e4cf4-0dc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.230.61:40249/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771527861, "uuid": "cc5246ec-0dc5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.216.78:50050/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771527967, "uuid": "0be9846c-0dc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://saltreef.deepwave.in.net/coast_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528041, "uuid": "37cb79e8-0dc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.216.78:50050/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528092, "uuid": "5605e4d0-0dc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.242.128.206:50931/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528267, "uuid": "be4cfbf7-0dc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hotstone.firepath.in.net/burn_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528344, "uuid": "ec5cdc90-0dc6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.248.253.105:59013/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528566, "uuid": "70ecaadb-0dc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.32.213:57321/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528579, "uuid": "789da28e-0dc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.87.92:40171/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528762, "uuid": "e564eb86-0dc7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.32.213:57321/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528940, "uuid": "4f7690b0-0dc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.200.122:46150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771528941, "uuid": "5004388c-0dc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.31:58371/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771529049, "uuid": "908131b9-0dc8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://ashcloud.firepath.in.net/smoke_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771529359, "uuid": "49408a78-0dc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.191.230.61:40249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771529407, "uuid": "65dfb93f-0dc9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://glowtrace.firepath.in.net/heat_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771530008, "uuid": "cbdcdfc8-0dca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8428202012/G9QnOJ5.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771530021, "uuid": "d39e9acd-0dca-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.158.77.244:42971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771530199, "uuid": "3dc05372-0dcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.181.104:48150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771530366, "uuid": "a14286ef-0dcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://coalbase.firepath.in.net/fuel_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771530377, "uuid": "a84f0488-0dcb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.21.155:42657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771530846, "uuid": "bf8bb538-0dcc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://freezepoint.coldwind.in.net/ice_stat", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531038, "uuid": "323dd849-0dcd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.156.19:59245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531097, "uuid": "5574dced-0dcd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.66.82:58257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531336, "uuid": "e3ac7515-0dcd-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.147.30:54203/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531448, "uuid": "2688274b-0dce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://winterblast.coldwind.in.net/chill_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531686, "uuid": "b413f6e1-0dce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://snowtrack.coldwind.in.net/frost_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531697, "uuid": "ba9f4397-0dce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:36501/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531704, "uuid": "bf321ae5-0dce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://211.158.77.244:42971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531751, "uuid": "db3b1895-0dce-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:36501/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771531816, "uuid": "01913feb-0dcf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.14.71:36325/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771532246, "uuid": "02253eee-0dd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.47.9:53892/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771532308, "uuid": "2707c0e7-0dd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.66.82:58257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771532346, "uuid": "3db4c611-0dd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://northgale.coldwind.in.net/temp_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771532603, "uuid": "d7196c8b-0dd0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.33.50:59915/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771533917, "uuid": "e5e67c7b-0dd3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.157.160:56401/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771534219, "uuid": "9a0f7a5b-0dd4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.181.104:48150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771534391, "uuid": "00ec8140-0dd5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.167:54721/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771535771, "uuid": "36f32752-0dd8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.190.82:49612/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771536130, "uuid": "0d4614a4-0dd9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://23.92.130.154:43644/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771536376, "uuid": "9f9d9437-0dd9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.138.118.0:59689/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771536546, "uuid": "0537c178-0dda-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://huntpack.graywolf.in.net/trace_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771536975, "uuid": "04ce07d9-0ddb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.53.234:44345/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771537026, "uuid": "23574150-0ddb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://wildstep.graywolf.in.net/path_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771537040, "uuid": "2b5a3ac0-0ddb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.190.82:49612/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771537208, "uuid": "8f995cc9-0ddb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://greytrack.graywolf.in.net/area_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771537566, "uuid": "651d0b64-0ddc-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://forestnode.graywolf.in.net/unit_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771538286, "uuid": "12004940-0dde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://bluehunt.bluewolf.in.net/alpha_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771538291, "uuid": "151387fc-0dde-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.53.234:44345/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771538707, "uuid": "0d0f7517-0ddf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldpack.bluewolf.in.net/wolf_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771539007, "uuid": "bffa471d-0ddf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://nightrun.bluewolf.in.net/track_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771539009, "uuid": "c159b153-0ddf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.92.187:60404/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771539070, "uuid": "e5b9874f-0ddf-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.68:60855/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771539260, "uuid": "56cb746f-0de0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.103.160:49947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771539315, "uuid": "7754ada1-0de0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.149.92.187:60404/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771539486, "uuid": "dd41f05f-0de0-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://leadpulse.bluewolf.in.net/team_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771540028, "uuid": "207264a5-0de2-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://lightcore.coolstar.in.net/star_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771540633, "uuid": "896dcb38-0de3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.137.32.179:41438/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771540695, "uuid": "ae563824-0de3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.129.68:60855/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771540748, "uuid": "cdda38bb-0de3-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.112.26:55484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771540867, "uuid": "14d7594f-0de4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.53.223.204:44203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771540868, "uuid": "15045699-0de4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://brightpoint.coolstar.in.net/glow_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771540870, "uuid": "1622620b-0de4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://y5d9oidj.blue128cinder.digital/?=check&&actmn=dLPtizzpOPHyDBsd", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771540930, "uuid": "3a31f5ad-0de4-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.150:58387/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771541286, "uuid": "0e69e96a-0de5-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://spaceview.coolstar.in.net/orbit_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771541897, "uuid": "7a669aba-0de6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.215:41688/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771542017, "uuid": "c23a9537-0de6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.226.150:58387/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771542075, "uuid": "e497b873-0de6-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.137.32.179:41438/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771542307, "uuid": "6ee718d2-0de7-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://coldbeam.coolstar.in.net/ray_log", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771542872, "uuid": "bf683327-0de8-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.92.140.197:39480/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771543157, "uuid": "697000d2-0de9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.216.74:34146/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771543218, "uuid": "8e0819b0-0de9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.115.163:43171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771543392, "uuid": "f5cd98f9-0de9-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.85.30:45913/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771543867, "uuid": "10d221e4-0deb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://steelsync.ironwave.in.net/metal_id", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771544117, "uuid": "a5a1272d-0deb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.249.215:41688/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771544227, "uuid": "e764d437-0deb-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://hardflow.ironwave.in.net/wave_val", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771544838, "uuid": "539151f1-0ded-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.226.74.99:2071/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771544857, "uuid": "5edf99af-0ded-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.161:35932/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771545066, "uuid": "db5224bd-0ded-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "https://powerlink.ironwave.in.net/press_ref", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771545250, "uuid": "48f845ec-0dee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.225.168.230:35742/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1771545429, "uuid": "b40b2508-0dee-11f1-8369-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.196.206.245:39336/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486324, "uuid": "16adff3c-0d65-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.236.64.121", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771503245, "uuid": "7c183d94-0d8c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.15.110", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771534384, "uuid": "fc81656b-0dd4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.18.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771504685, "uuid": "d6bfe5ce-0d8f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.20.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465806, "uuid": "5081c065-0d35-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.97.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771540924, "uuid": "36cd556e-0de4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.226.150", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523644, "uuid": "facb2b9d-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "111.228.4.54", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771526764, "uuid": "3eb35d64-0dc3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.225.168.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505044, "uuid": "ac9d5e01-0d90-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.253.106.104", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771545425, "uuid": "b122fe03-0dee-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.196.206.245", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771502645, "uuid": "163f66fc-0d8b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.105.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465206, "uuid": "eae98ae7-0d33-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.232.251.237", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771487106, "uuid": "e88e2c99-0d66-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.236.74.128", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771464424, "uuid": "1922f1ee-0d32-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.15.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771544824, "uuid": "4b5a4c6d-0ded-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.226.74.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771518963, "uuid": "14e409e0-0db1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.27.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771491484, "uuid": "1a4e13c6-0d71-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.48.50.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771525684, "uuid": "bb12d46f-0dc0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.210.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771495505, "uuid": "76abad0f-0d7a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.103.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771524305, "uuid": "84d8dcb4-0dbd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.243.54", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486924, "uuid": "7c52da48-0d66-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.244.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771540864, "uuid": "130282a0-0de4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.53.223.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771514224, "uuid": "0c6cd8e7-0da6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.248.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771487705, "uuid": "4da624d5-0d68-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.93.23", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771508884, "uuid": "9d7870fd-0d99-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.156.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771459924, "uuid": "9eebab23-0d27-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.56.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771469345, "uuid": "8dee9a67-0d3d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.185.170", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771471684, "uuid": "0059f63d-0d43-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.21.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771460405, "uuid": "bdb0b729-0d28-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.200.152.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481645, "uuid": "31815a39-0d5a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.205.90.51", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771544824, "uuid": "4b5a68c1-0ded-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.18.161", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771517464, "uuid": "975464fd-0dad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.21.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771459865, "uuid": "7b80f274-0d27-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.183.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771474325, "uuid": "2659c074-0d49-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.151.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771524184, "uuid": "3cf02d83-0dbd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.142.68", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771512485, "uuid": "ff6c7166-0da1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.123.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771519444, "uuid": "3374eaa8-0db2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.253.69.126", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771528564, "uuid": "6f9682bb-0dc7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.32.213", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771463044, "uuid": "e29a0b53-0d2e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.164.204.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771497844, "uuid": "e8aede05-0d7f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.166.23.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489685, "uuid": "e99a7670-0d6c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.238.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771499644, "uuid": "19d5c51a-0d84-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.179.239.5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771467966, "uuid": "580b4d67-0d3a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.180.35.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771504265, "uuid": "dc28e7fe-0d8e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.185.242.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492444, "uuid": "564b6f14-0d73-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.224.21.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523584, "uuid": "d7532c2c-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "121.73.169.114", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771500785, "uuid": "c1e45116-0d86-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.241.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771497425, "uuid": "eef2fc1d-0d7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.11.73.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771530364, "uuid": "a053acda-0dcb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.21.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482623, "uuid": "7848924a-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.227.196", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771503125, "uuid": "3468ae53-0d8c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.171.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465566, "uuid": "c1783962-0d34-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.174.154", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771499525, "uuid": "d2c2875a-0d83-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.8.56.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509906, "uuid": "fe94c0a0-0d9b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.82.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771477865, "uuid": "6498adeb-0d51-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.60.131", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771460405, "uuid": "bdb0d41f-0d28-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.45.65.77", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523584, "uuid": "d7532bac-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "136.233.149.66", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771540624, "uuid": "83aa67ad-0de3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.137.32.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523584, "uuid": "d755244a-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "144.6.89.62", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472105, "uuid": "fb282555-0d43-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "150.241.65.135", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482845, "uuid": "fca04054-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "165.22.58.103", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482623, "uuid": "7848cdf6-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "167.172.154.218", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523584, "uuid": "d754d473-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.117.43.36", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771502105, "uuid": "d4f652d9-0d89-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "172.86.68.175", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771539005, "uuid": "bf16870b-0ddf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.149.92.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771485544, "uuid": "459d1fce-0d63-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.122.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771517164, "uuid": "e46a43f3-0dac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.157.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771508824, "uuid": "79c841b7-0d99-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.166.0.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771512906, "uuid": "fa5550fa-0da2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.167.245.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523584, "uuid": "d7550c30-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.120.220.194", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771514284, "uuid": "2fcd8e9f-0da6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.141.174.227", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509006, "uuid": "e5f9ebb9-0d99-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.116.15.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771507385, "uuid": "1f846cb9-0d96-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.113.0.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771480084, "uuid": "8f1ff094-0d56-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.114.33.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771468264, "uuid": "0a0a07f8-0d3b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.194.83", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771540744, "uuid": "cb15b37e-0de3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.112.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509364, "uuid": "bb7aaca4-0d9a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.244.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771499764, "uuid": "614529c7-0d84-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.247.98", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771501625, "uuid": "b65fe381-0d88-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.114.120", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472705, "uuid": "61245c8e-0d45-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.162.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771522984, "uuid": "717b68d7-0dba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.247.142.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771530005, "uuid": "ca8aff55-0dca-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "211.158.77.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771520643, "uuid": "fe791713-0db4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.200.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771461664, "uuid": "ac1a0112-0d2b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.209.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771463405, "uuid": "b98d07b1-0d2f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.32.203", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771501264, "uuid": "df40b694-0d87-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.202.90.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771495085, "uuid": "7c79e7fc-0d79-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.13.250.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771500306, "uuid": "a43a3a20-0d85-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.15.185.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523584, "uuid": "d75520dc-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.106.63.234", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771518664, "uuid": "62b5df7b-0db0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.135.217.218", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771524063, "uuid": "f4ea3d37-0dbc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.147.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771514945, "uuid": "b9bb6765-0da7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.250.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771513083, "uuid": "63d80893-0da3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.10.79.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465685, "uuid": "08627625-0d35-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.192.27.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771526705, "uuid": "1b557eb7-0dc3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.204.252.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771497305, "uuid": "a78133af-0d7e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.184.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771498924, "uuid": "6c7bb8ea-0d82-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.214.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771536964, "uuid": "fe58ba17-0dda-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.53.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771479964, "uuid": "47aba0e1-0d56-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.103.36", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462565, "uuid": "c5040531-0d2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.101.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771480324, "uuid": "1e488a1e-0d57-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.103.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771527844, "uuid": "c26c981e-0dc5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.216.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771543205, "uuid": "86755f5d-0de9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.115.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462385, "uuid": "598ee0c9-0d2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.102.4", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771468806, "uuid": "4d30ee7c-0d3c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.224.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771512064, "uuid": "04a116bc-0da1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.233.148.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771522084, "uuid": "5940ffd4-0db8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.85.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771517765, "uuid": "4af6d222-0dae-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.89.86", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771474624, "uuid": "d8a3e669-0d49-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.252.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771531084, "uuid": "4d94082e-0dcd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.66.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771497005, "uuid": "f4a8e3b7-0d7d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.169.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771526224, "uuid": "fcded793-0dc1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.242.128.206", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771491965, "uuid": "389d1da2-0d72-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.67.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771485846, "uuid": "f9cbcffb-0d63-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.5.92.93", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771479605, "uuid": "71654123-0d55-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.195.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771514165, "uuid": "e8d5de13-0da5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.28.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771514945, "uuid": "b9bb6175-0da7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.65.215.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771473844, "uuid": "07c0e17b-0d48-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.42.88.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771525085, "uuid": "559deffe-0dbf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.49.40", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505885, "uuid": "a1ac925c-0d92-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.8.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465085, "uuid": "a2be2703-0d33-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.25.232", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462324, "uuid": "3583670a-0d2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.91.96", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771541884, "uuid": "72dffeec-0de6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.249.215", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771528925, "uuid": "469d655e-0dc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.254.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771543144, "uuid": "61ea0182-0de9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.216.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771516085, "uuid": "6140b127-0daa-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.119.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484045, "uuid": "c8219554-0d5f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.33.49", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523584, "uuid": "d75598de-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "69.159.155.246", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771471684, "uuid": "0059bda0-0d43-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "72.49.193.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771475884, "uuid": "c7b1b48b-0d4c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.88.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489506, "uuid": "7f56d98b-0d6c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.247.93.97", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1771472284, "uuid": "6617ee85-0d44-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "95.32.111.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482545, "uuid": "4a0cdcff-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "app-clash.com.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771529047, "uuid": "8f7c4e4e-0dc8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ashcloud.firepath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771483206, "uuid": "d3ce70d1-0d5d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "baseflow.box1fig7.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771507205, "uuid": "b46f37f2-0d95-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "blackfire.darkfire.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771521244, "uuid": "64aaa37a-0db6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bluecloud.skyrain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771538284, "uuid": "11319630-0dde-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "bluehunt.bluewolf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771524184, "uuid": "3cfec44b-0dbd-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "blueocean.deepwave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771515366, "uuid": "b4a4d72c-0da8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "blueplum.box671plum.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771513207, "uuid": "addb3c5a-0da3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "boxflow.fig08box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481706, "uuid": "56346e8a-0d5a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "boxlayer.box1fig7.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462505, "uuid": "a17b3d6e-0d2d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "boxstore.plum63box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771540864, "uuid": "130ffc89-0de4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "brightpoint.coolstar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771480685, "uuid": "f55a1b75-0d57-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "brightsky.goldstar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771479784, "uuid": "dc46a574-0d55-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "brightsky.starpoint.city" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482549, "uuid": "4c4bfd08-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "clash-org.com.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771522806, "uuid": "072b8517-0dba-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "clearair.skyrain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771530364, "uuid": "a063be98-0dcb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "coalbase.firepath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510145, "uuid": "8d210c4d-0d9c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "coalpoint.darkfire.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771542305, "uuid": "6dd543f2-0de7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldbeam.coolstar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771538705, "uuid": "0be27af7-0ddf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldpack.bluewolf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493226, "uuid": "285a2b84-0d75-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "coldship.ship48mint.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482623, "uuid": "7861d455-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyxes.pavingny.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482623, "uuid": "7857b0ca-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "cyxes.technick.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771491666, "uuid": "8665701f-0d71-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "darksky.eastmoon.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771524964, "uuid": "0d958e67-0dbf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "darkwater.deepwave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771484045, "uuid": "c84894ab-0d5f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "desertroad.sandwave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482623, "uuid": "78afab1e-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "deusxeno.ws" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465144, "uuid": "c63d22fa-0d33-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "drivelogic.fastlane.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771485425, "uuid": "fed3d2eb-0d62-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "drywind.sandwave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771496884, "uuid": "ace01fa4-0d7d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "dynaquipautomation.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771475344, "uuid": "85f51593-0d4b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "earthmap.natureway.city" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771491965, "uuid": "38af0167-0d72-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "eastorbit.eastmoon.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493826, "uuid": "8ddbd0fb-0d76-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "famba-co.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771506665, "uuid": "72dfaab6-0d94-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "farmfresh.pear7pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771467547, "uuid": "5ebba687-0d39-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastgate.cloudbridge.city" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771497963, "uuid": "30031683-0d80-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastkiwi.ship46kiwi.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771495624, "uuid": "bdd8180a-0d7a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fastpack.ship48mint.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510684, "uuid": "ce462b53-0d9d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "figbranch.fig08box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482364, "uuid": "de3ef32d-0d5b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "figstore.box1fig7.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771537565, "uuid": "64587ab9-0ddc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "forestnode.graywolf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771530844, "uuid": "beb3aeb5-0dcc-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "freezepoint.coldwind.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771512124, "uuid": "28a7be2c-0da1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshfig.fig08box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494785, "uuid": "c995ea91-0d78-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "freshroute.ship48mint.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771461123, "uuid": "69b95f24-0d2a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fruitcase.plum63box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489206, "uuid": "cc668e65-0d6b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "fruitpack.pack12pear.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771520165, "uuid": "e11f0f6c-0db3-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "globalfruit.kiwi9ship3.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492325, "uuid": "0f771058-0d73-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "glowpoint.eastmoon.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771529406, "uuid": "653498ee-0dc9-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "glowtrace.firepath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771486806, "uuid": "357f6ac2-0d66-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldensand.sandwave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771480206, "uuid": "d8061dff-0d56-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldlight.goldstar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771506364, "uuid": "bf2de01a-0d93-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "goldpack.pear7pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771496645, "uuid": "1e080328-0d7d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenbird.ship46kiwi.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489868, "uuid": "56de6041-0d6d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenlabel.pack12pear.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465984, "uuid": "bab2d13a-0d35-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenleaf.mint5ship.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771467725, "uuid": "c8d121e8-0d39-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "greenleaf.natureway.city" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771537205, "uuid": "8db0c830-0ddb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "greytrack.graywolf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771544225, "uuid": "e62923ef-0deb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hardflow.ironwave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771491066, "uuid": "20e96dae-0d70-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hardlink.ironstar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771514885, "uuid": "95da5148-0da7-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavybox.box671plum.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771522146, "uuid": "7e1e0e37-0db8-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "highwind.skyrain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509364, "uuid": "bb9e6e11-0d9a-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotelement.darkfire.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771528265, "uuid": "bcfb2064-0dc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "hotstone.firepath.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771536544, "uuid": "042c8a7d-0dda-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "huntpack.graywolf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494310, "uuid": "ae911aa0-0d77-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ia600802.us.archive.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771490106, "uuid": "e4a64823-0d6d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "ironcore.ironstar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771496224, "uuid": "238c208c-0d7c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kiwitalk.ship46kiwi.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771517345, "uuid": "50460b30-0dad-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kiwitransit.kiwi9ship3.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482545, "uuid": "4a0de8ce-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "kodimom.lol" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771539484, "uuid": "dc3c16f1-0de0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "leadpulse.bluewolf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771540025, "uuid": "1e91d1e6-0de2-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lightcore.coolstar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771467064, "uuid": "3ec265da-0d38-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "linkflow.cloudbridge.city" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489565, "uuid": "a27de97e-0d6c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "localstore.pack12pear.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482623, "uuid": "785a7303-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunetes.funnyhelp.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482623, "uuid": "7858616a-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "lunetes.technick.sbs" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771492625, "uuid": "c2066375-0d73-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "mintbase.ship48mint.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494606, "uuid": "5f2eba74-0d78-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "miriamgualda.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771539006, "uuid": "bf2076c8-0ddf-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "nightrun.bluewolf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771532344, "uuid": "3c7f9e21-0dd0-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "northgale.coldwind.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771519144, "uuid": "80e9fd89-0db1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "oceanbird.kiwi9ship3.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771501264, "uuid": "df4fc0d9-0d87-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "openfield.westwind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771467364, "uuid": "f1825d8c-0d38-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "openport.cloudbridge.city" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771488065, "uuid": "2466d2f7-0d69-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pearbox.pack12pear.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771503846, "uuid": "e21fb43f-0d8d-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pearline.pear7pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771513449, "uuid": "3e37262d-0da4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "plumfield.box671plum.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771519325, "uuid": "ec6078a7-0db1-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "portside.kiwi9ship3.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771490824, "uuid": "90da1b12-0d6f-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "powerbeat.ironstar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771545064, "uuid": "da6d30ab-0ded-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "powerlink.ironwave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771507087, "uuid": "6e4fea94-0d95-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pub-085644fd7c304ed49d4ff78a323bd506.r2.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771479125, "uuid": "537f4d92-0d54-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "pxkpoxt8.cabinetslyuka.digital" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771464728, "uuid": "ce7edf56-0d32-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "quickpath.fastlane.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771461906, "uuid": "3bebb879-0d2c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "redplum.plum63box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771476784, "uuid": "e059ac21-0d4e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "riverflow.natureway.city" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771464904, "uuid": "37665340-0d33-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "roadrunner.fastlane.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482546, "uuid": "4aaef880-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "roundpack.box1fig7.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771527964, "uuid": "09aaab94-0dc6-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "saltreef.deepwave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771527125, "uuid": "15cab7cd-0dc4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "seacurrent.deepwave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771494005, "uuid": "f8e4300c-0d76-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "shieldns.my" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465387, "uuid": "57087fc0-0d34-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "shiftpoint.fastlane.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771480865, "uuid": "6063e311-0d58-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "shinepoint.goldstar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771465625, "uuid": "e4ce92ee-0d34-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "shipfresh.mint5ship.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771498624, "uuid": "b9f6c1af-0d81-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "skyline.ship46kiwi.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771510865, "uuid": "3a2d6d14-0d9e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "smallbox.fig08box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771509548, "uuid": "294a810b-0d9b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "smoketrace.darkfire.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771531684, "uuid": "b3063f19-0dce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "snowtrack.coldwind.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771523404, "uuid": "6c291a49-0dbb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "softmist.skyrain.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771481345, "uuid": "7e982b6c-0d59-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "spacecore.goldstar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771541284, "uuid": "0d661893-0de5-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "spaceview.coolstar.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771490405, "uuid": "97140613-0d6e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "steelsync.ironstar.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771543865, "uuid": "0f61e9ba-0deb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "steelsync.ironwave.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771517164, "uuid": "e48f5f0d-0dac-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "stockhub.box671plum.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771503125, "uuid": "3477a693-0d8c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "stormtrack.westwind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771499825, "uuid": "859f591e-0d84-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "strongblow.westwind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771505344, "uuid": "5f7a8f98-0d91-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweetfruit.pear7pack.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771462865, "uuid": "77bba088-0d2e-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "sweetstock.plum63box.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771466464, "uuid": "d8eaf790-0d36-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "swiftcore.cloudbridge.city" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493825, "uuid": "8da40f33-0d76-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "thecommunitynetwork.free.nf" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771493647, "uuid": "236658e4-0d76-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "trackpolicy.xyz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771487406, "uuid": "9b2a221f-0d67-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "warmtrack.sandwave.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771499644, "uuid": "19e9d151-0d84-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "westcoast.westwind.coupons" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771537024, "uuid": "224753d7-0ddb-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wildstep.graywolf.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771475525, "uuid": "f1be5fc5-0d4b-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "wildtrack.natureway.city" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771531445, "uuid": "247fc133-0dce-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "winterblast.coldwind.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482545, "uuid": "4a30120c-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.clash-github.com.cn" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771489565, "uuid": "a280a7da-0d6c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.safebrowse.io" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771482845, "uuid": "fcc3c51a-0d5c-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.vame.be" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1771540867, "uuid": "1458593b-0de4-11f1-8369-82aee05be84a", "comment": "Malware payload delivery host", "value": "y5d9oidj.blue128cinder.digital" } ] } }