{ "Event": { "published": true, "date": "2026-03-31", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-03-31", "timestamp": 1775002525, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "bbaf0fd7-8847-459e-8840-d7a6f26f5c94", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774915746, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774915746, "uuid": "23015bd3-3ec5-4944-9c2d-ef9eca4df53e", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774915746, "uuid": "76c597c2-bb1d-44ad-aade-bcd13141c5da", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774915746, "uuid": "96912645-ba63-4fd4-99f3-3a9e43d1dbdf", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774915746, "uuid": "36729298-6a5f-454b-8f1d-1583223c6cee", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774915746, "uuid": "828d4d9c-2e5d-416f-b899-640d02e4185c", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1774916414, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774916414, "uuid": "27cc89ff-3d27-45e2-9c69-4ab4aefd5636", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774916414, "uuid": "d8687a5b-047c-4d26-b4ae-110025bcba58", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "eilf", "colour": "#10ef2b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774916414, "uuid": "d2535669-c90a-4e1a-a8c9-928d3234a536", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774916414, "uuid": "7f10a193-3ab3-4275-8104-485d7b9b4d6d", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774916414, "uuid": "dcf92013-1d32-49c8-858f-351a0e19f772", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "32a2ce89-2c93-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774918633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774918633, "uuid": "9278ae29-393d-44dd-8b49-648e4e256b58", "comment": "Malware payload (ACRStealer)", "value": "29e94dab937061f6314053ebdf63ecea", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774918633, "uuid": "8b19c981-3676-4b48-9340-1f01f0db178c", "comment": "Malware payload (ACRStealer)", "value": "f2207ba54c7c0025a9a75ad69a26404424283866ad57addc7a4346f551a7379e", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774918633, "uuid": "bc107385-999f-4a61-a7eb-9c06c98ec273", "value": "T10776E706EF710650C46982F4586B416267B53C58AF3067DB2695B3702E73BF83A7A3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774918633, "uuid": "f9e193c9-bc53-4e49-bad4-36f001f1d7ba", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774918633, "uuid": "056f97c8-a53f-4868-9a67-5630c9688381", "value": "49152:Q/vVbY5vfbA6b9dtfDT0M7CWhfm5pojKvOwTl9j6LQcl9iqpc:Q/ufNf5TVvg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774918633, "uuid": "c4668d52-7269-47b5-83c3-b38e01cc4378", "value": 7450112, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774918633, "uuid": "bd585786-7925-42ac-8a8d-2f6cfce3e0aa", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "281c1f56-2ca2-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774921039, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774921039, "uuid": "b22d6580-2a45-4ecd-bc7d-a7077c465e6c", "comment": "Malware payload (Mirai)", "value": "85604c0d89ff7696a4e6d11ad2cad99b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774921039, "uuid": "b43ec4b0-06d5-4437-b803-b7dcc33a3078", "comment": "Malware payload (Mirai)", "value": "9fb82cabe4aa41f42f90e4a96a8c18f5f4a7ca964591298d37ea1e55cfb9b497", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774921039, "uuid": "20f24890-525d-4972-91dc-e145f5086986", "value": "T130363B02AF449EF7C8EBCD315E3DC38304ADAC97658C6666797CCA5C3A6650A1EC34", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774921039, "uuid": "964c6518-46df-4718-ac38-780e551c3351", "value": "98304:q/H0qQQIwbaH2iNYyE5RLYqXI7ZbuqklQrR8unET8mX6EonH:qvCMqNc0Z2QrRZRQ6Ea", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774921039, "uuid": "445a90bc-9002-4762-865f-bfc33bfe18c0", "value": 5340792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774921039, "uuid": "5028fe84-0993-4583-8b7d-efa14421cb55", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cf9a1e9a-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774924326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924326, "uuid": "322e6516-ec1a-416a-9d2b-bf7dd7ba5ae0", "comment": "Malware payload", "value": "01c8c1ce5999e747a055af6c3d0a081c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924326, "uuid": "a17286c8-e782-4c43-aa8c-96922f2435a8", "comment": "Malware payload", "value": "76a11f591a826a33aeac956e5d817a22eed6f4506319426f9a74330294e96f5b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924326, "uuid": "1c6e06f7-9a03-4a8d-9b6c-6fbbb217256c", "value": "T1C1C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924326, "uuid": "17674928-367b-4fee-a380-f93f8d854fad", "value": "12288:j+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bypH9I1P0QKw6FEx:j+QqldA/TSO713u7xnpH9IaQKHY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774924326, "uuid": "ea7d0089-3ac9-409e-af51-919d1ad1e565", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924326, "uuid": "67edd4cf-ccd1-4f37-9a94-d7b6b164fd90", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfa7f036-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774924327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "d894c3bc-9dc3-4c40-8699-41154e3b07fe", "comment": "Malware payload", "value": "12cc19ca3c172d3a6de25eccefbcc552", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "1c80c3df-3985-4c7d-9aa8-3297453bd71a", "comment": "Malware payload", "value": "16bc9214b96b1f62415113977cf09c2bd6c843c356313cfe228e46c7c22bd47e", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924327, "uuid": "62267ff5-90d7-4b91-9320-a031c88df536", "value": "T1FFB423CD64BED0A87B658DDA9FDCBFD30CFC403A6D7526F2A51C1A13A0C400B64A95", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924327, "uuid": "4f0d51a8-907a-462f-94b0-893cf9d38a95", "value": "12288:HB/e4pqNFTFbEXknDoGbDDGIabs/7iiEVwYg2l3/2NyJ:HBm4pgT1oGTabs/7iiWw0DJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774924327, "uuid": "1548d63b-3176-4a71-b848-a9e769422235", "value": 510128, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924327, "uuid": "9fc20af4-5752-4954-a3bb-0c8a5e402866", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d029bb98-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774924327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "a4026b27-b2ae-4fa1-84a4-84ccf77bfe83", "comment": "Malware payload", "value": "86632e7025c5b6f2ea1dd4c1ad32f16c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "a23314c9-49f1-4781-9fdf-1f11d258a0d0", "comment": "Malware payload", "value": "3abffd19f59ef90327e98275ddddc4318bde87985e9817f9ce34e40d7c873209", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924327, "uuid": "54e094c0-746b-4cd3-8df3-785dcb87e4e9", "value": "T1D8B423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A81", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924327, "uuid": "3db88cb0-bdad-4dcc-a828-ba813e3fa185", "value": "12288:BGRl4nbDDGIabs/7iiEVwYg2l3/2NHly+wK8v:tTabs/7iiWw0KYxv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774924327, "uuid": "25008e0b-c37c-4753-ba6b-709f1f60a3d0", "value": 517076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924327, "uuid": "e294001e-7b49-44b6-a69c-ee2712306ae4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0377a70-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774924327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "02180916-2f15-4668-ab87-8c287057a545", "comment": "Malware payload", "value": "5cc1daee4384400636392d6a2e6af473", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "5bcf4d53-1b22-483b-a7a3-146f319b66b7", "comment": "Malware payload", "value": "633621a44ca93a64bb249201771b5d635f3c82b7358315a797ec5dd24a75f47c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924327, "uuid": "a9bf1ac9-ed73-43df-a49a-dce06c57ac1f", "value": "T12CC42367226F72500DFE92EC4E4156196D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924327, "uuid": "6bafdc47-cc88-420c-9156-375ec9408345", "value": "12288:geCEhts9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakQ:nt2A/f0Za6TCXKBxlz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774924327, "uuid": "6c813660-8ecd-4c1d-b0ff-ecf3affae37e", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924327, "uuid": "7edfc7ad-30ca-405c-99b2-2ea871e9ab41", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d0431ab9-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774924328, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924328, "uuid": "d02e4796-d221-4c6b-a0d5-825c1c7c53f5", "comment": "Malware payload", "value": "11f7d32384ae015b1eed698e231a31d8", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924328, "uuid": "c5514c97-d9fd-4017-9557-08651d4e1818", "comment": "Malware payload", "value": "7005d92bf14c865e21b0b761324ce72c2719ba41f3d86557e3991ccf018fb93c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924328, "uuid": "65cc960e-6ff3-486d-b4fe-4ef4d307f0b6", "value": "T1C0C42367226FB2500DFE92ED4E4155186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924328, "uuid": "a16950f2-9855-4627-9e0d-6d439dc72354", "value": "12288:seCEhta9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakS:DtMA/f0Za6TCXKBxlp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774924328, "uuid": "de4803dc-e423-4168-b292-edfea3d4d076", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924328, "uuid": "b9b40c63-8c2c-4bda-9610-e420937e9bb9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d13742d3-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774924329, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924329, "uuid": "e358be3e-9ceb-4c5e-9ba2-fc1d0634d224", "comment": "Malware payload", "value": "95a0c635944f1279a0be41e224977888", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924329, "uuid": "3f439454-b426-45cd-831b-6ab6b702daf4", "comment": "Malware payload", "value": "9a1fc48cebefb43d24ccf6181bced47cbf443908cba70621e64e1eb7f25f7a32", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924329, "uuid": "c8625e46-d79c-457d-80b9-e57287cc6421", "value": "T1E4C42304340781D5835A2B1EAEC4E6E0BEB5A0DBFA1CF940AADD7ED06DE52A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924329, "uuid": "dfd764b9-63cd-4686-94a6-b4dfe3a9de5a", "value": "12288:36wlOMWROC/FTeHo22Qm7NzofOr68mZeA924EwCj:P4MQOC/gHozN7NzomW8jA9A", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774924329, "uuid": "d042c39b-eba6-4ee6-9b1a-2d7b128ff68a", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924329, "uuid": "01cc9a8b-5509-4ff3-b697-2ad1312e5ca6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f3a6ef55-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774924387, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924387, "uuid": "09f3fe54-7d8c-43e0-9e6b-235beb8606d5", "comment": "Malware payload", "value": "6fc681aeadbab05ff3e53f72d50067e5", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924387, "uuid": "d4eee9a8-27ad-415f-b20a-8eccce0a87a6", "comment": "Malware payload", "value": "d8e38efa2fa2b9bbba8bfc76205954bc175fb911816ac8986c4a79d33cd2c789", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924387, "uuid": "d1ad4b2e-5488-47e9-a6f3-a4d8091d9d39", "value": "T15EB423F5AB506BCC9D20522E2F4A2BCF19274B41B403C54A1AD2875A421F6FF4E7AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924387, "uuid": "c8234b30-87d6-4b55-9ea6-9fed64aad7fa", "value": "12288:wBRdpQ73iBVYW1CwvEXgbvM0a4OTHiQIIFzuK9Gd9IUa:wHUw2Ww9XgbM0azTHiQIouDu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774924387, "uuid": "cc856995-214a-4ab0-91b8-f107e328be72", "value": 542317, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924387, "uuid": "75d54069-a83d-480c-bc43-a34f5059851c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cbbbf1c8-230a-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774925648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "b0348177-c22b-4dca-a4e4-e7687730c5b0", "comment": "Malware payload", "value": "f523ccfd4fb2ea86db71dd1ca7b2799e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "47b4ab23-ec03-4ecb-9a40-f6792fc23ae8", "comment": "Malware payload", "value": "95870c87802f6a68dcbd50a7e38f1541ec401bc2853517523c5c51b721016010", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925648, "uuid": "3f6d7985-df31-4f9b-a272-8c49dd45ab38", "value": "T11BC42304340641D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADE7FD06DE92A177C14", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925648, "uuid": "471318f2-0cce-42b5-b390-5c366f9c1465", "value": "12288:X6wlOMWROC/FTeHo22Qm7NzofOr68mSeA924EwCk:v4MQOC/gHozN7NzomW8wA9X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774925648, "uuid": "7aa2352d-5b80-4c9a-a6a7-b84939768190", "value": 584482, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925648, "uuid": "fe668996-a07a-4792-b07f-0b621f63d035", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e369d81d-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774925648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "88e32ce1-4baa-4935-8307-c08e4a14f2f2", "comment": "Malware payload", "value": "0d27ac047682076e98b4a3ba43783e0a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "c536d4a5-849a-4277-9ddc-b7e859859aa2", "comment": "Malware payload", "value": "0657247461540bc47e85220e9a88f43cd08217a9a1eabd8b88cbf21efcdccd9f", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925648, "uuid": "a5ad2b3d-79a2-4664-8d67-5011b86ac150", "value": "T1F8B42369227F71500C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB199638E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925648, "uuid": "ce573cc9-70e5-4982-a4ba-6e470d8d720c", "value": "12288:r7JZAaFpeEqO3g/ALyYG0ZaDajTCXMO8xzDOe3W2:bLpeOA/f0Za6TCXKBxm2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774925648, "uuid": "c61d248d-43e8-4e33-88f7-1bae628141be", "value": 542164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925648, "uuid": "d6f9cbfe-36a8-4e53-8f36-72b1f7186a0c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e37e4781-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774925648, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "5ee0bd56-2b81-478e-a8ca-f9bec2ddbc02", "comment": "Malware payload", "value": "bcd86db41e7950403d3598a618bf913e", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "88998464-7d87-4e62-9418-0ae6ec29f73f", "comment": "Malware payload", "value": "d81754f39750277028a1bc4658f4ec3ea3452fa5cb0922947844c4a85b1d5b7b", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925648, "uuid": "0675823b-46bb-4182-83a5-9671a83e1c28", "value": "T13FC42367226F72500DFE92ED4E4156186D3D8E322A00A6FE55D8C9CE8719F0ECE35E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925648, "uuid": "931373d1-cd46-43d1-960d-0d618373c357", "value": "12288:UeCEhtS9qO3g/ALyYG0ZaDajTCXMO8xzDOeQakS:btkA/f0Za6TCXKBxlJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774925648, "uuid": "a91680d9-0b1c-4f70-9a0b-8c63b54a650b", "value": 546286, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925648, "uuid": "697f657f-7110-4fda-bf9b-0fcbf4bf4b08", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3a9408c-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774925649, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925649, "uuid": "30439800-37cb-438c-8f79-d67a97ab9717", "comment": "Malware payload", "value": "417ac48380ce19242029e62ea3783dee", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925649, "uuid": "7a2fc9f4-4ada-42c4-8851-91c0843ac829", "comment": "Malware payload", "value": "e841732d5286631bf0dec192897ddeeebe8a19dcb69b539e3296c9fb0b750ec7", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925649, "uuid": "3d0832c6-0b73-45a0-a520-504393a19aac", "value": "T101553346C17C28C44F7D0A677BBF995C62298EFC10021863AF569CD7393F38B86745", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925649, "uuid": "c93242b1-9f78-4a01-976d-bed0e41cf233", "value": "24576:2cjASGYdsxQ3BoZjxbq9j8XJlqrGAuImQIMESQ+hcqMXHC0Clwi6/CttWaR+:VjAedhoZ9bq+MmMEL+hcjXHC/wnwd+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774925649, "uuid": "54213d44-8071-4aef-b30d-47667bd1fe5b", "value": 1395076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925649, "uuid": "9af3c3c4-c9a1-47a9-ab61-79c0abbc958a", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9b839aa4-2cb0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774927246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927246, "uuid": "4fe3a3de-d0e6-4363-811f-af874fddb519", "comment": "Malware payload (Mirai)", "value": "ce47b8deb932398ef97e6112bc7de633", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927246, "uuid": "de5da520-8c6c-4e8c-89ba-dedb34273d0d", "comment": "Malware payload (Mirai)", "value": "c4d9c7e644806fad3a83a083e3c8d487bd2788a996f0b7aa01712ff68f6dd3d9", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927246, "uuid": "de004a92-75bd-4870-a026-e056f0f96d75", "value": "T159044B46EA408B13C4D32775BBAF42453323AB64D3DB73059928AFB43F8679E4D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927246, "uuid": "2a40fc40-eb0f-434a-8068-b94ccda05a6b", "value": "3072:lRu97jI4rqE9SsRTM6/JaOf0aHd3NYjZX2juOVQrmvN7BM/9+OomIjDA:Pu93I4rbSsRTMkhsaHd3NYjh26mvNdMj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774927246, "uuid": "c52998db-f831-4016-a345-90bb64e231c3", "value": 180740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927246, "uuid": "62dbf2af-a411-4bfb-b58b-76c424daf6e6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb61eece-2cb0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774927326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927326, "uuid": "9237c41e-c7ef-4b42-b8a3-02ffcc058e77", "comment": "Malware payload (Mirai)", "value": "ac7f1d74d5101a4bce56f8a325acfa87", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927326, "uuid": "a2841646-ee33-4f3f-b993-f09b2beddb21", "comment": "Malware payload (Mirai)", "value": "264818e170ff995895e102f89e6cd77232c64e31f72505a3417645ef44fa9f0f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927326, "uuid": "ce989074-6748-442e-b6f6-2babd0f158f8", "value": "T1A8064922BC90CA62CBC066BAFB5E829C73135B75D2DF71068D14473436EBD5A0E3B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927326, "uuid": "3a9e5712-47ec-49e1-99b2-d35392e0eb34", "value": "98304:P1Pw2DeV52yww7ZwUYGkGd42/jAK983Kny:t9I52ykGd42rAK98an", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774927326, "uuid": "055fe78a-41f1-4317-87e6-ab4993d9761e", "value": 3999008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927326, "uuid": "995ef8c7-dc80-4317-bad5-013e3292531f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1774927337, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927337, "uuid": "db935bfb-e8ea-42be-9b87-c2d88971e4ec", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927337, "uuid": "2f5af8ec-7a13-49e2-8c63-8624cc912f99", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "cowrie", "colour": "#4d4007", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927337, "uuid": "beb755d1-c86c-4279-a09c-a392377918a0", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927337, "uuid": "885b2429-0365-4ea9-8fe1-3dfd3ae57763", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774927337, "uuid": "ebd486ea-41e3-45e1-aefe-7fb75efd2607", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a9e276-2cb1-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774927501, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927501, "uuid": "b2964d11-e134-4255-badf-33544545211d", "comment": "Malware payload (Mirai)", "value": "1aabe03da470a7be5478507dd589fded", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927501, "uuid": "8318d1a3-c021-4cce-b41a-f3fcaa60f690", "comment": "Malware payload (Mirai)", "value": "af5195e882ab3ab966730dd022119a4c5d996245f6fef56ee4ba458dd73da8ea", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927501, "uuid": "80a4ea62-4fb8-412c-a406-6dbbed65a3c7", "value": "T14B464C1AB2B314ADC15AC430836FDA236D35B85542317D7F2684AE742EB6E705B2EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927501, "uuid": "8e59d57e-2213-4902-89c9-25621d2054d1", "value": "98304:JJTBsEUfYU6akkWTQtvJxkvfPws9+daIic8Pn6tHg8Dtj:RYM9WicW8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774927501, "uuid": "a00e8705-0633-4739-9895-27a3b657d1e5", "value": 5669928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927501, "uuid": "6305f54c-29e4-4b57-af0b-496745a723b2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3778a9c8-2cb3-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774928366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774928366, "uuid": "8cbf2ced-66b4-463f-8a0c-d827c4886096", "comment": "Malware payload", "value": "161d4a0bd4152bf1ee1fdc273de719a6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774928366, "uuid": "d21b7543-8a51-479b-ae62-b80c811e08f6", "comment": "Malware payload", "value": "adea4d9cab01a33a46592713ff4c9fff59c63421fa3b2edce553a86368b88945", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928366, "uuid": "5fb70609-d288-4aba-bf75-a1587df33761", "value": "T1F68309327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928366, "uuid": "7cbc57ad-4109-4272-ac59-1858f904e526", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnAWa2VN/:XEKltp9txAX/yr2pbAWPVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774928366, "uuid": "9ff3a905-a14b-4a97-bf93-bd52715f87a4", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928366, "uuid": "6cc92483-841e-464f-a9ed-1aaf1ab0feef", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774928411, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774928411, "uuid": "04265ada-aaef-43a0-b65e-3a9fdd24d486", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774928411, "uuid": "bc789a60-85a0-4df2-8da2-f32091df8dcb", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928411, "uuid": "f8d52660-8538-482b-985f-1cc930e5b244", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928411, "uuid": "eff50420-d09e-489c-82ad-d03ef672bbea", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774928411, "uuid": "4dc66969-d53b-4796-9492-40ce35f33a56", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71ac4213-2cb3-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774928464, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774928464, "uuid": "c4f66551-5b94-46b7-8061-7b62144a7bd9", "comment": "Malware payload (Mirai)", "value": "708ea1fee754c0504728085b8a1dc4d2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774928464, "uuid": "7d2d9aa3-f6b4-437a-8b92-a57ce32789b6", "comment": "Malware payload (Mirai)", "value": "750d40291a3797d818b6df83638bf7c68531e96835bd525e92ed0d02720c1f56", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928464, "uuid": "28dea85f-6da4-4d96-a4c5-dedaf8d4e31e", "value": "T1723618132761DF2EF359C13405B3C9612AE516A229E585CAA33DF23C3F60A5A741BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928464, "uuid": "31f7029c-5009-444f-9441-e8c842623c51", "value": "49152:fKJY6qcn1hh/vS+pL6pez3OtggqOqPn+pulv2S/cvY+mEdVERCKqnn4/5HQutWqt:f56qAh5gZ++UVenn2jXny+0k6q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774928464, "uuid": "455c2b3b-02d3-4ef5-bdc8-e511154f41f0", "value": 5340792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928464, "uuid": "5fe33185-65e2-4faa-aad8-362a4dc50704", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b5b5e8b1-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774929007, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929007, "uuid": "c0b04f59-550f-4e04-aa21-476ca57aecdc", "comment": "Malware payload", "value": "eb94a9aee4304e00931a2e37bb3b43a7", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929007, "uuid": "965b7daf-05b3-43fb-807a-102b4719d1cb", "comment": "Malware payload", "value": "f1bae02a75a5fa8246350e525fe591f1aa78ae44b2d7bb70f8529a83888e6fca", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929007, "uuid": "425972d7-bfd0-4f53-9a18-3dab683cac44", "value": "T1E5C4238BA3FD845390BF1F58AA5BB48D091976F34722DC93146A3213D9CB323B7526", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929007, "uuid": "1dd424d4-4dfc-4bc5-af19-a74ccb7768d0", "value": "12288:L+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2by1H9I1P0QKw6FEV:L+QqldA/TSO713u7xn1H9IaQKHM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774929007, "uuid": "08137a6a-59df-4ef6-9d37-2ca44a438afd", "value": 587686, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929007, "uuid": "309e7e3b-2955-4a08-942b-bb6f0bde42d3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "caf94020-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774929043, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929043, "uuid": "b2957aa7-6583-45e0-90fb-112e9f1ee7e3", "comment": "Malware payload (Mirai)", "value": "c6b3ff946eae15f66e1960b2eb8a03db", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929043, "uuid": "779dcaa8-6c0b-4706-8e77-d9bae93bf7e3", "comment": "Malware payload (Mirai)", "value": "77e6390a8c4fd3df1d4b905183bd1736601c89691e24d2d1e436918a494041da", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929043, "uuid": "88ebc26f-0329-42f9-b46e-a2123e231247", "value": "T136067C41BA14392FF4151DFB8107CF26A6169B65C542263FC32CB8A7BD702B03B9BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929043, "uuid": "db51d8d9-fc4a-4143-a62c-d6d634fb211b", "value": "49152:wf/O9UKp99NnEgWFDBvOZpq8yx18+RQYRTaslf9W9oRamuyLuz1/bC6S:bUKp9TEgWF8Z54QYw99BySz1+6S", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774929043, "uuid": "f9e9b6f5-d16a-472b-b83f-d19517847ee7", "value": 3795340, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929043, "uuid": "39029d27-0bad-4a63-a772-e985f7ca07b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774929068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929068, "uuid": "f50a899c-c4bd-4231-9f07-8d06c14258fb", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929068, "uuid": "78654860-bc2e-4d3f-854e-bcba54318ff4", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929068, "uuid": "3e3c3e1a-70df-4edb-98da-2872760ae6cc", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929068, "uuid": "e6456fce-4746-4211-bfae-18db61326c1c", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774929068, "uuid": "a6a489b9-cf0e-4be5-8416-79eea61ef618", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d07a617-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774929208, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929208, "uuid": "6abcb617-3330-4f5c-bb28-7bc3330098f2", "comment": "Malware payload (Mirai)", "value": "a4ce2fbb491b3f9f6baa2b6a96967dc8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929208, "uuid": "cb36bbe8-95d9-47e3-adef-c28e17da3de9", "comment": "Malware payload (Mirai)", "value": "d675a732e91a71e192c49e0e7a91ab83dc9a91f5aa734da2b4e999d39a8fa0e2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929208, "uuid": "f8297473-8e28-4796-a214-650a5789bc60", "value": "T126464845BB2C0923D6530DF0993E43D5F3263B4382B1A22B6B0F67473179A36A6D77", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929208, "uuid": "fffa093d-4831-4da3-bf70-7765187a74cc", "value": "98304:o/3k+pgSj410N9NVvcNeAkd5l09azEAx1eyAcYCxtayltoYCdBvdu7wUUWZhQdke:N0NV2Cb3UaeuygDrOd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774929208, "uuid": "23517dcb-6654-4f82-9947-da3afe29e8e0", "value": 5530764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929208, "uuid": "8487a9fa-37cc-483b-8eb7-db930bfd3be2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdf355b4-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774929451, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929451, "uuid": "44d51389-00d8-4e90-bc40-47ba64c124fb", "comment": "Malware payload", "value": "f0dcdcf15c4b286d400c5f5af52da396", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929451, "uuid": "6f2581aa-19fc-46a8-82ab-06fd131dabc5", "comment": "Malware payload", "value": "da12c311ed2b4a76290dbe964747da0da29db2cbbfa48622178e2704d3d6b2cc", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929451, "uuid": "6db874f9-5d7c-4700-aca9-a6f82c7bd4ba", "value": "T14993E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA5238A5F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929451, "uuid": "447760c7-3fc1-42b9-a1ec-2b0afc02fc0a", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXwIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774929451, "uuid": "8fe2abce-4901-4266-aaed-5d1c6c3eff4c", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929451, "uuid": "6f03f8cf-cb0e-4d87-96ba-b8be98bd6449", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd250a30-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774929503, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929503, "uuid": "dd2bdca7-eb20-47a9-98d0-f07b0d258089", "comment": "Malware payload (Mirai)", "value": "b3f8032fc5ad49ae9bfcfebeecf44bc7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929503, "uuid": "ad2b510f-ef57-4848-90bd-db452c5b7539", "comment": "Malware payload (Mirai)", "value": "4944fcda73f45ac864fd36849c3be9cb3318fd650d378568e8b86faf3b56f4ac", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929503, "uuid": "1715192f-9051-42dc-a939-7877b689aba8", "value": "T137C3C60E2E629F7DF369833547B78B3193A927D223E0D646E2ACD1141E6034D645FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929503, "uuid": "96b5e4e9-004b-4270-b8f3-7a312ab6e4aa", "value": "1536:lxW8D+q7jLEIvVNfdoMyKXfpF3alFvHFJaHFEXl+zp/ryx6KophnQthe9XKKS:fW8D+qLE+TBF359yx6KovwoXBS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774929503, "uuid": "20e55de9-9e86-4fac-be4c-a7cd991e4f1b", "value": 121052, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929503, "uuid": "20358773-bc53-4202-a05c-7d3fba20db21", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09db55a1-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774930867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930867, "uuid": "1077e345-123e-43cf-94b2-430129e4f14f", "comment": "Malware payload", "value": "2e8c6d560afc85510e3282d0b6484ea0", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930867, "uuid": "41b928ca-5407-4d08-9610-9ec74235e8cd", "comment": "Malware payload", "value": "9ead394105853da140badf6f2c6a72e420aa5717e5e041910882870ef71c08f6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930867, "uuid": "02d9791d-6d70-4548-b430-026d3ded6f70", "value": "T134C423B7179AB4897503E3E4814C7D9489AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930867, "uuid": "1fae3d5a-bbd8-47ff-bb24-69712a20176b", "value": "12288:yeElNtIBB2gX3U5nA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezI:yeSIBBfHlm6Jj6ESfUxZ91kmY/9HeM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774930867, "uuid": "6f035dd9-dfef-449f-bffe-63f279e77c9c", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930867, "uuid": "19b06384-ac2b-411b-8972-387c686e180c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e6418c7-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774930928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930928, "uuid": "dab1e3d9-afb6-4f46-b785-50500699ceba", "comment": "Malware payload", "value": "79d57c8b0add6eebd9d58e92a3589d81", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930928, "uuid": "12397990-84fb-45b4-b6fc-622ef084648e", "comment": "Malware payload", "value": "f92fd12e85de80273a95abb269ed193cd1672f588aef655c020f27792e004a8c", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930928, "uuid": "ab40ecb5-483c-47ea-a654-e866a74a8979", "value": "T18EC423ED0B6E70884C7B13659B8322145E2E0F725A10B7D7A2E8D64D4E17A9C9F78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930928, "uuid": "2d1925f7-54a0-4134-9003-d1459f716023", "value": "12288:5yBXIs7rM1rcqOqO3g/ALyYG0ZaDajTCXMO8xzDOee5A:cImQ1zEA/f0Za6TCXKBxeu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774930928, "uuid": "bfa4d835-c288-4755-ad11-b7bae223e837", "value": 547027, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930928, "uuid": "25ef0dcb-624b-41d9-8cc0-b91ffb7c02f7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2e7b9f26-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774930928, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930928, "uuid": "2e219abb-5641-4261-9f7d-c4bb42ec8431", "comment": "Malware payload", "value": "f6c4119a72e3e334738a7a175da0ab59", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930928, "uuid": "aceca3a3-2d54-4740-beec-a398bf8af43f", "comment": "Malware payload", "value": "10d469d484c1c41f6094abf2bdd5b71302743fb736fec4d9dcb3e746c6203faf", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930928, "uuid": "513c0a33-aa32-4471-a012-df76886dc6bf", "value": "T112C423792755F0C46206F2FC828CBCD886EF14F98B9315BAC90FA585F456257BB221", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930928, "uuid": "f7734670-f610-4dc2-8e20-0a519061e353", "value": "12288:OA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWMSFyorOIic/7MPV:Bm6Jj6ESfUxZ91kmY/99z8pFXicTy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774930928, "uuid": "913c4e38-6d25-4f5f-ad3b-2e025ced85b7", "value": 584580, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930928, "uuid": "8d1235ec-8482-4638-8b47-3f4f3cd79cf8", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "68046112-1a39-11f1-8a4c-82aee05be84a", "comment": "Malware payload", "timestamp": 1774930987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930987, "uuid": "273169c2-b6a3-4810-bb38-2a4782b45bf7", "comment": "Malware payload", "value": "c4374912473cd42cfe4e1abab51af40e", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930987, "uuid": "42bd8916-00ed-4626-a462-ca4407202d08", "comment": "Malware payload", "value": "212c76daf355ede116eb04d4f9d08a112d07940a14dc248bc568ff1ba0a64e18", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930987, "uuid": "1c68b38e-3340-461b-91ee-4460d3716608", "value": "T13DD4F8B462047880C4AAA7729D74AFA8E23D11A9DFCE3ECC1194FAD01FB37557A0D9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930987, "uuid": "9015b29e-5c96-4d26-b426-0ec97be1b4f9", "value": "6144:ZJSveutXkgEoCqT2741a3LywBTwjMtxwHVMeOF0buUwKB:qeuhra7T42MMQf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774930987, "uuid": "fe466679-3745-4122-bc1f-0aa1785950f7", "value": 617316, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930987, "uuid": "97d9d11e-9d99-4d2b-9289-5fe04ca07edd", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "51ce5f77-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774930987, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930987, "uuid": "bad9cdcc-c13e-42b7-9059-2cc5a20097ad", "comment": "Malware payload", "value": "8f3691fd9c79174a91c068471e035236", "object_relation": "md5", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930987, "uuid": "d7b7001a-fb37-419f-8f1f-46efc4fc10e0", "comment": "Malware payload", "value": "75919986369b63bba5ba6064e27a53928165bf8697b89cde0f1ccf3f7f9392a5", "object_relation": "sha256", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930987, "uuid": "cb22c20a-03e7-4002-bd61-05878873f99b", "value": "T1AEB518B4B5D878D0E56FC537D7F8EDBD663726F295CB688C0119A3C20A92385BF488", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930987, "uuid": "43ce7252-41ee-4a12-84b5-f4ffee2c6f14", "value": "24576:wI8qF2b7eWWUGasgU+sKEiHV+jLRONUqPhcyIYKzDWON:z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774930987, "uuid": "2fa32c1e-c36c-4a95-be8f-ac242454ff3c", "value": 2405376, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930987, "uuid": "9c3ae49e-beb1-42cd-9e90-61343cde46d8", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "290e2ab8-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774931348, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931348, "uuid": "457a31ee-0376-4d64-adb9-3bd49909de8f", "comment": "Malware payload", "value": "e68b75c24201b46e35ce8734b6c41622", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931348, "uuid": "ee043710-63a9-48fe-ade4-932c8d7d9872", "comment": "Malware payload", "value": "f9d696f637a6d91390c39cfd748baf59fe27fd9ecc5b1c4ef8575ceec4c45021", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931348, "uuid": "147acc8c-7bc7-4f3a-a4e5-4a8282aa0bc2", "value": "T133C423E84CC68A18DB79FD9982197C16F5EE1E311C0D39B5E4863A32CDDF33989206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931348, "uuid": "f901bddf-c1ce-412e-a2d0-33e6290c6c49", "value": "12288:85W3Zq74KU7pUTqfpOFfsc7PZWzB0or6ve:82Zq74H7S+fsFt0NJr/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774931348, "uuid": "2fb67892-c141-4253-a9a6-b083cb0bf522", "value": 583568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931348, "uuid": "1f5d8d9f-dec8-47aa-b846-a550b7823bc9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29c87049-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774931350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "5e906ab2-db49-4e9d-80b8-7491b4bbbfda", "comment": "Malware payload", "value": "d348cd598e992db99efbd9490840c904", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "98d30df4-f6ee-41c9-b023-f43c4f7e54f5", "comment": "Malware payload", "value": "5a130f3dd21a79e6776fe4a30b99473aa3548d200c3ac459e31992a209494098", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931350, "uuid": "4768f634-67a6-4d2e-a53c-b7466875bb28", "value": "T14AC423B7179AB4897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB200", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931350, "uuid": "3378cde7-5422-4cf8-be56-cf8427a33271", "value": "12288:5eElNtIBB2gX3U5sA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ezE:5eSIBBfHqm6Jj6ESfUxZ91kmY/9HeY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774931350, "uuid": "24b4ac54-b773-4798-8952-74359509c14e", "value": 584435, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931350, "uuid": "ea2ad657-15cc-4b1e-a917-53a88a052918", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "29c8fdd1-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774931350, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "ba1ae916-deaa-4398-899b-a493fe59621c", "comment": "Malware payload", "value": "20452e35a1ec5a5bc5bedd0583808eea", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "d4856ecf-caa5-41ff-9467-e12f191e95e4", "comment": "Malware payload", "value": "6abb4d97e78999968041aeb43ce1d99e4ecbe27c75c5152c41745cf62dfd18c6", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931350, "uuid": "70544211-8750-4f93-a06f-cf37f49c3db8", "value": "T11CC423E84CC79A18DB79FD9982197C16F5EE0A311C0D39B5E4863A32CDDF73989206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931350, "uuid": "68fd60c1-3336-41a1-9af7-bb1e44808766", "value": "12288:w5W3ZqJ4KU7pUTqfpOFfsc7PZWzB0or6vY:w2ZqJ4H7S+fsFt0NJrN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774931350, "uuid": "6c4116f3-07dd-4a57-8726-54f39c146f25", "value": 583568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931350, "uuid": "c454b915-99a0-411d-8bfd-9507e678ddda", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d9b230bf-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774931645, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931645, "uuid": "1fbb4630-b472-4725-97ee-58cea908e7ef", "comment": "Malware payload (Mirai)", "value": "51c5d657885c357281967f958314b84c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931645, "uuid": "a6c736e9-184f-43f2-94ae-f30d8aeb1238", "comment": "Malware payload (Mirai)", "value": "fe334cfac7c661cf8e7c1aeef56a1bf06ebeef717f433aad096d11666c48e58e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931645, "uuid": "e9585a28-fc5e-4440-bb2f-f94709676a7a", "value": "T1E9167C0373F5457AEAC05A358BFA43533286E6A464D54B228F50CE6FAF22B5328714", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931645, "uuid": "a54b54b9-ffaf-4e28-afd3-a1f887105ec9", "value": "49152:gvpPY6HUuxCuIroJqBMb0atjhWwN6yaoqAPGpyk:gvpPR38DrFMb0atFWwN69oqLp3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774931645, "uuid": "8b0600d6-744b-4553-bdce-2c3af7eac4d7", "value": 4336716, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931645, "uuid": "6f1b3cad-3b91-4ae0-be5c-426f76ad494d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "eeab9005-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774931680, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931680, "uuid": "3d01f871-473f-452d-a280-e8dac5d5856c", "comment": "Malware payload", "value": "27ef0344ff8a0ed7e51bd7127929450f", "object_relation": "md5", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931680, "uuid": "7cd84708-4e32-4a87-8ae3-5e59fdd5c0ce", "comment": "Malware payload", "value": "c8bac7104d7fbc9faf2c4c25d7d37e23812c4845705868e9386f5d21355bee88", "object_relation": "sha256", "Tag": [ { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931680, "uuid": "2510b7b1-d33c-484c-965a-ad2e03563f80", "value": "T12C6833D3C2B1270BEE56AE318B65998C8B782C05B5B168B3646DBD4379F3BF070B45", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931680, "uuid": "f50fc432-48d2-40cf-a0f6-66577bce08c5", "value": "3145728:JVz9ChP1x+4Esh5bI+3FJOy9JRxxB9BFRvHNlF2FUb:LaG4l5JFJZ9ZLrFRv52eb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774931680, "uuid": "c1bf0658-fb74-47de-af9c-c779ebde8440", "value": 142565090, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931680, "uuid": "7a6bf030-febc-4e57-8f6f-2654cbd6b626", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9daaf9d-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774932128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932128, "uuid": "46f9077c-76cf-43f8-bfc3-6f4e47b0c681", "comment": "Malware payload", "value": "4b1998b08ccd67c41281601822a6584d", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932128, "uuid": "df030bef-008c-4bdb-b6c2-7f6456a30b99", "comment": "Malware payload", "value": "26c55e69c017ac85ca75c702b0e3e4bca82d5f217a242b1bc50ac3020c3c8afa", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932128, "uuid": "025de112-33ff-456b-814d-3e2c283b20d9", "value": "T1EEC423E44CC79A18EA79FD9982197C16F5EE0B311C0D39B5E4863A32CDDF73989206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932128, "uuid": "35c13c63-e89d-418b-8b31-013401e5cb04", "value": "12288:s5W3ZqX4KU7pUTqfpOFfsc7PZWzB0or6vi:s2ZqX4H7S+fsFt0NJrz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774932128, "uuid": "177ab420-b920-4e75-9d4e-6bc3793f59f9", "value": 583568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932128, "uuid": "89379c5c-f460-4c8a-80cc-ce7bbb6a394b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9f0b91f-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774932128, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932128, "uuid": "0d53540b-2478-4724-9861-2b68e70a0354", "comment": "Malware payload", "value": "5ed86738e0198a32669b2415746a8d99", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932128, "uuid": "f4875d2f-bd6f-481b-b2a8-94d4d2a77a18", "comment": "Malware payload", "value": "66788ef8b05c7c6e83ffca88d006856d9f891cf2f497453d751171ab05bc60c0", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932128, "uuid": "607f1dab-20da-4344-80c3-9095ea5c57bc", "value": "T1DEB4231AF4D078CFD68ACDA394292C785F6C96C9CD126B7246C4EE9313442F627A44", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932128, "uuid": "fa527f18-0554-4cd3-a4ca-b51c14eec57c", "value": "12288:FTibgSMFBOBSlqrDKu7FxPbzJTVBU+8JM9hAC8Z32VOBRkbKQDiUbpKg:8cSMFYhKkxpTKJM9mCw32VOMWAPbp/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774932128, "uuid": "cb958a58-6d6d-4077-b78d-aa7e7882fbe9", "value": 525573, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932128, "uuid": "94cfc55b-0e33-4a5e-96b7-b58568a6c69b", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa0b3bd9-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774932129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "b63ca51d-0a13-491b-ab8a-c1637dc49d96", "comment": "Malware payload", "value": "438a51ad6d7c2748f9292edefb0ab50a", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "6b755365-b89e-4fdb-96cc-7049aa3e9ab6", "comment": "Malware payload", "value": "2688450e692b12e5a3c429e615c42e82576d59810008b97684abbd7ddeb5ef0a", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932129, "uuid": "fde063a8-50d3-4fc4-8d8f-ad6de20f93e6", "value": "T18DC423E84CC79A18DB79FD9982197C16F5EE0A311C0D39B5E4863A32CDDF73989206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932129, "uuid": "b29eb0b1-5185-468d-a448-e918c68c79de", "value": "12288:+5W3Zq64KU7pUTqfpOFfsc7PZWzB0or6vF:+2Zq64H7S+fsFt0NJro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774932129, "uuid": "43f199a4-3130-4e38-8d30-e44c3fdfb481", "value": 583568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932129, "uuid": "fadc87d6-fb72-439a-8b06-b1f599057d2c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "fa261dcd-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774932129, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "8c7b2ad1-1ccd-43e4-8283-024770e6b0bb", "comment": "Malware payload", "value": "6569b6bdc00c507e11c54c27581f15b3", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "8bd72e8e-a17c-4653-961a-8d5f397fd0c7", "comment": "Malware payload", "value": "92f8656079a68536907156845bfe7d672385f10ed267e374c2f0b6c65d95a8e4", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932129, "uuid": "9101a24b-db8f-4e5b-bf96-6dc1da61aba6", "value": "T1C5C423E84CC78A18DA79FD9982197C16F5EE1E311C0D39B5E4863A32CDDF33989206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932129, "uuid": "085a990e-9592-4c02-aec7-11ced98d34b4", "value": "12288:w5W3ZqD4KU7pUTqfpOFfsc7PZWzB0or6vG:w2ZqD4H7S+fsFt0NJrT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774932129, "uuid": "9864a53b-bd26-49fb-be39-adabaaf6a75f", "value": 583568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932129, "uuid": "c50a389c-2baf-4abb-b384-8e1907ff80b4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4031cb19-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774932246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932246, "uuid": "7d925ae5-828a-4bf3-9940-67e899fe6fe1", "comment": "Malware payload", "value": "98e0c4dd936dc28a5d4c9ebdc7f9ceae", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932246, "uuid": "cbbea2eb-ba61-473f-8e50-41735d68eb9f", "comment": "Malware payload", "value": "0bb34fc10034431f074f497ad28edfd1ee75a30f71a0f2dcc3719d573b5cc1ef", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932246, "uuid": "a41c8970-1f6d-4afc-8c38-e7aac751e5e8", "value": "T181C423E84CC78A18DA79FD9982197C16F5EE0A711C0D39B5E4863A32CDDF33989206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932246, "uuid": "d41707b9-a584-488c-ab10-62ace60d9981", "value": "12288:+5W3ZqG4KU7pUTqfpOFfsc7PZWzB0or6vt:+2ZqG4H7S+fsFt0NJrM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774932246, "uuid": "968ddff2-f90c-46c2-b774-404731654e28", "value": 583568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932246, "uuid": "1c2d3e68-66d7-40df-a5f5-8e0333be6480", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "40874122-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774932247, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932247, "uuid": "e126f048-f351-4cb3-b67f-af141c227899", "comment": "Malware payload", "value": "b8702009e5379a2b30397d88a9477c97", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932247, "uuid": "8155807c-6b7b-4a31-8a1f-90c8ac48b7c2", "comment": "Malware payload", "value": "2ef0b30ba9a1c353bd4cdff3b9b05d35509dca00be37d24934841825b447c544", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932247, "uuid": "6c7ed682-3d70-459b-942e-eb4802d685da", "value": "T162C423E84CC78A18DB79FD9982197C16F5EE1A311C0D39B5E4863A32CDDF33989206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932247, "uuid": "c6c7798c-9eba-474e-8f27-454db92e2fdf", "value": "12288:+5W3ZqS4KU7pUTqfpOFfsc7PZWzB0or6vN:+2ZqS4H7S+fsFt0NJrw", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774932247, "uuid": "35b6c715-cc28-4f56-800c-5c1c051b7a55", "value": 583568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932247, "uuid": "54115c0c-b157-435c-9939-532dcd7ba645", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "41cd7a38-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774932249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932249, "uuid": "15e4fd58-4434-4858-9239-ebe546f06b6e", "comment": "Malware payload", "value": "6a4344e3bdccc751db0529bd067daf1c", "object_relation": "md5", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932249, "uuid": "d16df3af-5153-49ac-9e16-c35d2261557c", "comment": "Malware payload", "value": "d49a4d0b07eb2d1b18a465da98ffee29c34b34faf523b53f0c99423133ff1c19", "object_relation": "sha256", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932249, "uuid": "6caec67f-2d5b-46e6-b477-a90dc7a443f6", "value": "T170C423E84CC79A18DB79FD9982197C16F5EE0A311C0D39B5E4863A32CDDF73989206", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932249, "uuid": "0c0e71c6-8a51-4b5e-a583-63e5fa3ed986", "value": "12288:I5W3ZqR4KU7pUTqfpOFfsc7PZWzB0or6vo:I2ZqR4H7S+fsFt0NJr9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774932249, "uuid": "d46666b6-ab01-41ec-8f45-4faf754f01e5", "value": 583568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932249, "uuid": "bdf7f430-1329-410e-8bce-a9f4a8e6c0d5", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ddfcbb4c-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934229, "uuid": "bccecee7-ce54-457a-9234-a09500950bea", "comment": "Malware payload (Mirai)", "value": "52db00c476a8ddc60ae97daff29e9a6f", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934229, "uuid": "67119e68-0561-418b-a4be-367c9680f839", "comment": "Malware payload (Mirai)", "value": "e58f7172a560783dd333ecfd49d43fc3015ba48f24f186744be850b0e8fb02f0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "3bdb50bb-e75a-4a5d-bad2-270ee1508190", "value": "T106245B53A70D0683D05B5DF036F727F083ABA91125A66284F60FFE845377AB1A41AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "c7ff7227-d4b8-42e2-a0dc-cd457f703bba", "value": "6144:3DtI4xP1RHezprt2ikcKOYLxO1l0dv4mDsoY86eeaL57sc:TtISw72iHKZLxY0dv4mDsoY86eeaL57H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934229, "uuid": "943a5ca3-2423-4875-a658-85381e2b212d", "value": 214278, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "b2541da6-0c2d-4da5-9b18-5347ef3371be", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de2e46d0-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934229, "uuid": "3ca76e46-7170-47fa-8d8d-1e8173677468", "comment": "Malware payload (Mirai)", "value": "ba811d2687760260192c336fd9d25a48", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934229, "uuid": "d4760943-a8a9-4e59-9d96-039ea6104b0f", "comment": "Malware payload (Mirai)", "value": "755fed0394349de93868f4696d1023f676c9d94c329189023483b04791d46ef9", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "1660e64f-9e77-40a3-b0ef-e1d98d602402", "value": "T170143953A8A55FF7C191AEB165E35AB10757E8140B0B0F8AA53AEAF4070F8CDB40E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "5acdb69e-8b5d-498e-8f9a-dcae4060b790", "value": "6144:4WGImS/WCgClfePmGwPRRomDHoYBgecaL5AU4:5GImSOCpcPmGKRRomDHoYBgecaL5AU4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934229, "uuid": "4f977a78-dc37-4e78-bea6-9313f81486d7", "value": 201516, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "c3115a55-5ca3-401d-9bcc-0cedb949deb4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de433ebc-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934229, "uuid": "a367cce1-a97c-4362-96cc-e4e4c5c07ae0", "comment": "Malware payload (Mirai)", "value": "0c3dadb54177e2b4b1910c1234e10ea7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934229, "uuid": "4a357c46-e2ad-4db4-953a-060576cad9ab", "comment": "Malware payload (Mirai)", "value": "1dd3fb5ebad3a6c96be41d89334b2b683ec8d4f4595513fd737e9d56a37aec3a", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "451fda0d-6e35-4c53-adc4-3bff88e250a7", "value": "T10A244A1775D189FBC4C68BF52BEB95619933F4391B32220BB398BDA52B0DED85E1C2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "4b94826e-363e-47fd-b4a9-2e9696ec49a5", "value": "3072:f6jIwHPlJSi0EbosVucvboeqz3UdQ6GUa9WjsUOSJqmnERv10Ew5MU7:AsxS1E/UOSJqmnERv10Ew5MU7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934229, "uuid": "3353862a-3db4-45ae-9a5c-a5489597e6ee", "value": 226789, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "f4a6e054-94cf-41b9-9475-1c3ba028102d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de441a37-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934229, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934229, "uuid": "04c4c327-6929-4546-aae1-9ad16259e0fa", "comment": "Malware payload (Mirai)", "value": "b37409ca1ef40ba162fc5f6df6f8c4f7", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934229, "uuid": "152226fd-09f0-4970-8b57-ec6b040708c1", "comment": "Malware payload (Mirai)", "value": "cc56956ae61a8acd0f9260a78bc87dd223c9d6b18ef2cec4156b65a768e54a58", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "3dd7a591-6b17-4a54-a056-78ee01f4c07c", "value": "T1DBC37E45F392D0B2D44707B012E7D32656B0EE7317198E06E74CBFB1AA29645F22AB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "82bc6b38-f928-465d-bb94-79d73b3d80fe", "value": "1536:gVQMqLfS6oOkLyYkg6YoBMUF310vfni5olYEEGZEApxioDCHIrKZtyIP+XEiK:gVQMqm6SL5yYoKnPl3d0oH6tyXo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934229, "uuid": "c4411517-6dad-4bc3-b0d4-5c8238ce59d7", "value": 124643, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934229, "uuid": "4fe76298-e0b7-4e77-87dd-45661e98b707", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de538dbd-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "3da42f40-bb7d-467e-8d10-648c43894a51", "comment": "Malware payload (Mirai)", "value": "2d23339ed09251a71fe59308573c4243", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "fe742481-40e2-49fd-8c9d-be200bca9419", "comment": "Malware payload (Mirai)", "value": "9910c74e00625f80c7e55f2a46850b5fcd418495e1ff32642c0add7c3707630b", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "ceaa5fa2-b123-4231-bc2c-64176239a92d", "value": "T1E8342A05E9504F67C6C32BBBF79E429D3B325B2497DB3301A9196EB02F8678D1E392", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "4d956cb4-ece6-421e-8fd9-4fb4e2f1fe6e", "value": "6144:E/MRyMfD4MEo4aKclGyiwf+4Jy/gZ3/j20vGysGc:E/yD4MEN+7f+4Jy/gF/j20vGysGc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934230, "uuid": "11240163-056b-4490-a89a-e6bad1f31b2d", "value": 230486, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "18f9ab91-72a7-4488-aa1e-9b8878b7709f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de5eeed9-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "4abd2be2-4394-41b5-ba12-1844bf210d79", "comment": "Malware payload (Mirai)", "value": "92d90d34915d29a77b2b059e35cdee81", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "278fe674-86fb-4879-b1f1-d4ba1a4e7f11", "comment": "Malware payload (Mirai)", "value": "24aa822b95d167d2ba120d772a0a0c6f8fa27e4e80ee3c2ef7aca7fe17a52ae7", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "4bf94849-9713-4b25-b84d-c0379ebef067", "value": "T1C7245B43B71D0A83D15B2DF036B723F083EBE91125A66284E60FFEC45277A75641AF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "30793883-5ecf-4c8a-91a1-b449d0a52cb8", "value": "6144:fIZ/qoxO2RUp2LP4Jj1QNHeXWUQdv4mDsoY86eeaL57sc:wZqHkUQMJJQNxTdv4mDsoY86eeaL57sc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934230, "uuid": "79d3e401-0ec0-4689-8dbc-9c1047ae6379", "value": 214342, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "6d532b97-9c2f-4f76-8ecf-a2e3b4d96099", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de62630a-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "a6feb426-437d-40e1-a0de-002b9619c695", "comment": "Malware payload (Mirai)", "value": "cf18e2754e3eafd4df7d0c1ed3c09dea", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "f329cd02-61ad-43c0-a15c-b318346f8774", "comment": "Malware payload (Mirai)", "value": "4d60028b0637e3b98572d360061162ad322372b40c19947c5892fff1fd6fbffd", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "7a689efa-7d90-4f38-9275-afd5293f91af", "value": "T17254C50A6BA19EF7D85FCD3302EA861110CDE45612A96F2B7274DA1CF74B94F08E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "7b0b6fa7-47b9-4363-9c58-72b82dd392ff", "value": "6144:l6azH1aZ1iVgZBOEhAK138QBzXWF5chJalP1jfu8zUTz:l6a71azoqOIr3VrWF5chJalP1jfu8zUP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934230, "uuid": "93e346de-a408-49af-a21d-fbbae6b5ec88", "value": 291081, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "c9ead014-1a18-4855-b35b-3a50c2bc16d7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de6b68e1-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "dae5a893-8ffc-4a21-acd4-591d34ec5b96", "comment": "Malware payload (Mirai)", "value": "974b82588d175fd38379e0e15ea04912", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "f9f8abb0-c020-42b2-b3be-3f8533ebb328", "comment": "Malware payload (Mirai)", "value": "076cfb8aa47dde85c4adbacc5a7ffdae4424adcf8c4cdd8cff6567e6a92e0f04", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "98064bbb-3d80-4ed5-ab95-7304d78469df", "value": "T127342A02D5514B67C1C21BBABB9A429D37336F64D3DB3312AA14AFB02F86B9D1E3D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "71a64cb5-c9a8-4fc0-a024-a96a0bc459c8", "value": "6144:h0mqTIUwX0+w2a4Mstfta/4NvULDsnDMmmRnyAIZ5L4vyRe5:h0qNXtw2a41JtagJbDMmmRnyAILL4vyu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934230, "uuid": "8f82ffa3-19af-4f91-9b92-f29161012acd", "value": 245147, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "58b60832-abdf-43fc-80a9-2fabf9682c0c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de807b0d-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "77434d23-6f37-492a-91fb-62a7f859fffc", "comment": "Malware payload (Mirai)", "value": "aa60f016caaa7a3ef64c1d561963b304", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "4ca94476-9625-4ae7-be85-fb0ba5f1c94a", "comment": "Malware payload (Mirai)", "value": "d76b1b0f9045dafaef132350a8ee36fa7ea66d430952f5832b888cae73778f93", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "f93b07d6-5d4e-4758-9657-79f541a539ea", "value": "T10C044B42A742C6F3D5C31BF212A747210573E43A2F2FDA05E37DACB49A19588F61A7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "7bed7c30-ae33-480c-859a-ce6d04f39bad", "value": "3072:zuJG6/GDBzcG0fUXR59RTowRxJKLIVHuV1szCGqISJZHoEyU1taI5ZUa:zuJGRlzbr9oAxJpHdqISJZHoEyU1taIZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934230, "uuid": "a507d052-71f4-4d0d-8627-30c1ad5fbfd8", "value": 188966, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "685a815f-ec6f-42df-96b0-f2bd28874fd1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dea4d8cc-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774934230, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "8e62c647-afb5-4e1b-8597-ad85f7570361", "comment": "Malware payload (Mirai)", "value": "045b4694ca0c80e4721292c71b0338d9", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934230, "uuid": "50c5e388-77e1-42de-9e9e-c73b71ccea6b", "comment": "Malware payload (Mirai)", "value": "7b45422b404dc00fa906b3899a82e57ceac07e3aba6182aa13269f9c27389e80", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "b5dc18f2-39cb-48c8-8d99-2c37657574c8", "value": "T134343C93B904DEF7F40AE73604D307257231BB661A535A32B2177979EE3A2C4282BF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "5c23fd65-0a9c-420d-815f-9628bc2666be", "value": "6144:ZXdoYAIqtbZkhPLPOCUytN6rKXv4JDsoY85eeaL57Uc:ktbv2yKXv4JDsoY85eeaL57Uc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774934230, "uuid": "ce117af6-ca9b-4e91-a8f1-cec68ad43e89", "value": 232214, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934230, "uuid": "3b778cf8-d7ef-474d-885f-10f93900d83c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4fee5ee-2cc8-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774937623, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774937623, "uuid": "03d797c0-1b50-49c4-b299-8fe7c450d85e", "comment": "Malware payload", "value": "4835faf8d0d4978f25bd751022f91aef", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774937623, "uuid": "46874dec-1aee-4740-8f24-b701e86af0eb", "comment": "Malware payload", "value": "844c341c3da4df4845daaa4319c92da5a7ab7375d9817172dc89bb526664d473", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774937623, "uuid": "84b8e31c-246e-429a-9d96-8103c87ea16f", "value": "T1FF931A3178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774937623, "uuid": "14543cc8-485c-48d9-a4ac-f35107b2917f", "value": "1536:9Byp1tF/uwMmAIa14oXSoI7epeV7tb73WdxCrCitkb5fv2v05xB6rL17CsCZKS6x:98iI00GitkbFv2v05xB6rxCsCZJ6Yy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774937623, "uuid": "b5226a0b-1446-4592-8d0b-a8a272761e19", "value": 94591, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774937623, "uuid": "afcc491d-47eb-4f65-82a4-f267f853ba92", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3a39f278-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Ransomware.ClearWater)", "timestamp": 1774940826, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940826, "uuid": "45b07554-41d9-4dcd-b63e-a093d5cfc662", "comment": "Malware payload (Ransomware.ClearWater)", "value": "cf4840ae85d7acba4974d6dd55893d6c", "object_relation": "md5", "Tag": [ { "name": "clearwater", "colour": "#6b4e95", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940826, "uuid": "75a1356b-a43d-4f40-be99-f5b7d3445afa", "comment": "Malware payload (Ransomware.ClearWater)", "value": "00202340108c101d59bbfb3daa4bbd6b4436c167e3c9734c07bfbdcb1402f746", "object_relation": "sha256", "Tag": [ { "name": "clearwater", "colour": "#6b4e95", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940826, "uuid": "d4f6e12f-c427-4d1f-bbb4-586d1e6e59ca", "value": "T1BD2512AB36A055F4E1675078CA52D78AF3B27452073097CF12A487BA1F277E1AC3E3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940826, "uuid": "903d1107-0580-4aa8-b58c-bca016605354", "value": "22e7125b95acf497b07e79559bdc556c", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940826, "uuid": "b2b46795-d47e-4b1e-ab8f-82170791504d", "value": "24576:bqKAJ2nZBV6vryrLYJtQubXWFl+0vdc3ax0LT:bqr8fV6vQ8JeuDW+0m3ax0LT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774940826, "uuid": "ba406555-1372-4c6f-a7e0-1bb3293d0242", "value": 1007049, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940826, "uuid": "8155504e-4571-4348-af03-7884c170d69a", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16aad771-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774948169, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948169, "uuid": "8c41b6be-efa6-4ccf-bfdf-5c57fcedf2c4", "comment": "Malware payload", "value": "e739dc29e48462e4bee88c21474e51a7", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948169, "uuid": "1b9cf349-6330-472c-867a-be09ef466558", "comment": "Malware payload", "value": "56ed019e39933567056a99aa4822422af73d09886158c6aca16082388494d2f9", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948169, "uuid": "75d2f4a8-2570-461d-a86e-5f2a849ea4b2", "value": "D9F2024633943B73E16255F4E3BDAFCA601E7D64DFEE202BA4413A2270B311D688D81A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948169, "uuid": "342c7b62-c878-4c61-a50b-8a6fed3348f6", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8g:yYI0ARqw1qAEW67UIWi7M8g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774948169, "uuid": "14eabd67-ec91-4009-8bbb-34e3d722c89f", "value": 34752, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "97b0aaff-2ce2-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774948714, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948714, "uuid": "c176eaea-04ee-4076-9f6c-43480ba69063", "comment": "Malware payload", "value": "4300aca7e18b9d5584dde0a767d446af", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948714, "uuid": "fc283945-7764-4838-891e-490999a8e2e9", "comment": "Malware payload", "value": "6ce8a757d8b2482d43e04702d544428af1426849c1735c5813f3c063574d3845", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948714, "uuid": "5589ecba-3732-4e0f-a3e1-d264a2afa035", "value": "T10A34F1B4C3F5F70F2B0820D5EB27D88268E1C4A805E6A9B1A6373CC1614E6FE75767", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948714, "uuid": "659994b8-ca65-42be-ae5e-2aa5aa0ce213", "value": "6144:J3H+ozYosug4OM/zSZjQkw5epu0vIeAcVLF:JH+ZoVos2ZU4sX/sLF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774948714, "uuid": "2e1cd416-4eaa-4565-beb7-6271be7e61fa", "value": 247894, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948714, "uuid": "ba6397b2-9a10-4c05-b2af-b2b83b01957b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8db9c02-2cec-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774953091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774953091, "uuid": "106edbeb-626f-4d95-991d-8fbcd10d8225", "comment": "Malware payload", "value": "d128d909f51b9b1ec083c91d2ae6bfa8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774953091, "uuid": "01a7aa69-2893-4def-ad9a-3c2e54e71147", "comment": "Malware payload", "value": "89f24ad38f2da611629bb270e9515e990fb40bb1153b6d29cbf2e559510943d1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774953091, "uuid": "22dc4812-3a93-415b-a130-55b22bcdcd2d", "value": "T1BD34DFA13E74E5209AECD501A468FAAC1EFB5CBB014D10D0E6C757E05DE702CD7C8B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774953091, "uuid": "52910f73-f9e5-4d64-8295-d88c18469229", "value": "6144:rOX3b+Rrc5Bm4bJYGyT15E6ZgdnSsyG3fnI5:rOqFcFVyx5OnSsxfnI5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774953091, "uuid": "c38b2119-660a-4e19-ae91-5234ae72e101", "value": 247895, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774953091, "uuid": "6eb680e0-8e39-4c4b-a113-e5fd7aa38777", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "16289159-7fdc-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1774954416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954416, "uuid": "59b57659-5bec-4229-8d7e-18e3163483a8", "comment": "Malware payload", "value": "aa5fde36cb0e26ac7973b0d983884490", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954416, "uuid": "1a159d64-6cff-4cec-8cae-c13501b98a5e", "comment": "Malware payload", "value": "69ac6c1019c3f7133eb97a21b174ba9e40dea7c36a52170a5a8353d28bdffab0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954416, "uuid": "c359149c-2d04-4188-b15d-cbb2950b382d", "value": "E703028632953F73D51148F4E7FCAFCA714ABD54EFAA142FA8113A15B07235D24C982A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954416, "uuid": "5aa214fc-c6bc-4d54-bd6b-9af0487defa6", "value": "768:YTYIDfYG6ZmewZ59+Nw1qsREH20j7UNqVwi7M8ghFM04ZTo:yYI0ARqw1qAEW67UIWi7M8gmo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774954416, "uuid": "498766c5-8625-4b18-9d66-212631b65f0c", "value": 40544, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7753f501-272c-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774954628, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954628, "uuid": "3204fe9c-cac5-464c-aec9-0d32cc0d5cfd", "comment": "Malware payload", "value": "1e93b4bbc2dec3b675f72921c12cde1d", "object_relation": "md5", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954628, "uuid": "1626d7ac-f8a2-4a0d-8341-3942a06296e2", "comment": "Malware payload", "value": "95e6c6c13f65217f41c371abf6d03594b2bfed2259a1813bb4222fb2d3c32745", "object_relation": "sha256", "Tag": [ { "name": "xworm", "colour": "#3b494e", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954628, "uuid": "86969df7-fdcf-4412-a268-4fed22f05cfc", "value": "T146D57DDE194555E2D3FFB7A0C2B42E2E267173325C67691BA2FCA1C8CE103A66D43B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954628, "uuid": "4ed82a4f-3251-41b8-8cd0-d7ad31e711cc", "value": "24576:8+EhkjixLXR+bG/f29mFusqa+n0tkR5JoZh73VVPYDlJ0K3x0cG0dAtVJlzFrpf0:8UixbItdTrJoFVPMvXGlVTFrRid3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774954628, "uuid": "9dab6157-72b0-40a7-a052-d4f4075b7f02", "value": 2939045, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954628, "uuid": "b8d56a87-b2f4-4220-abe2-b8e1125ecff3", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f838691-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774954633, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954633, "uuid": "9bd1fb28-ea91-479e-b835-2e41e8791a3e", "comment": "Malware payload", "value": "6b47dd7a19752fbe91fab62eeadb6aba", "object_relation": "md5", "Tag": [ { "name": "LogMeIn", "colour": "#929b94", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954633, "uuid": "c92f6706-ac22-4f72-a994-bbcfd68f8ef7", "comment": "Malware payload", "value": "4b6d751cd5aade443ce66bbe4d454c978aefe1bff1ef7d28b4f8dbb3a468dcf0", "object_relation": "sha256", "Tag": [ { "name": "LogMeIn", "colour": "#929b94", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954633, "uuid": "60446bfc-0d74-4af6-81c6-2cc4c5b9dc1b", "value": "T1B44733227A82C5F6D98911F09D7CAEE9613D9C250FB184CB73DCBE597B301D22B329", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954633, "uuid": "51512fce-9449-4d6e-a525-e413ce9593b8", "value": "393216:r0/KoQ3Wn7iPEcBwjzT+NSmEBk81t9dsh6ily59SFZa2lR2wJhL9grZo62pw:A/KoQmn7G/BwjAskW1sh6WyOKSdJR9Wt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774954633, "uuid": "ed1817ac-0a10-4339-9a1b-aab163370c00", "value": 24952832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954633, "uuid": "0fd7869e-c192-4383-aca4-bd80feecae12", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61d184af-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774954637, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954637, "uuid": "16c083d6-e054-498e-be62-524ec0a986b1", "comment": "Malware payload (Mirai)", "value": "95ddaa2ddf8eefd4eb8e51bdc06b5580", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954637, "uuid": "958e3a25-af06-42f3-9f7f-b60f5007c60c", "comment": "Malware payload (Mirai)", "value": "3398f6aa08fd21b87a404c8535b9da157ede1cffd5561ec8a66f2f5434e795c5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954637, "uuid": "b4e1e083-0c22-452a-8f5c-c58d6f401066", "value": "T122233A49C703C1F0E8460570507BAB7AEE7A6C336170ED5AEB987A26BC32B11D50B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954637, "uuid": "d04d10ea-1db9-4f8e-93a6-49e09bfc57e3", "value": "768:sXK15wniDa6PO5+m0h5phDQrJzm3WUL9bUFUB8JIlAecucuN7iKlUH1msPK9K:sXK1KIfPk+m0rQomUL9lHcu5SmsiE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774954637, "uuid": "00d594a4-b5d4-4bb9-ba6b-f95fef0954b5", "value": 45728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954637, "uuid": "29a11645-3baf-40a6-aac8-135d9c3d4385", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8369ece8-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774954693, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954693, "uuid": "8d813c37-fc0b-4743-81ca-213061364ce4", "comment": "Malware payload (Mirai)", "value": "8873044bfd51f9abc2b3250ac9821aca", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954693, "uuid": "19a99611-c87c-4f9e-b23a-18c57ee18522", "comment": "Malware payload (Mirai)", "value": "f73a91223fd07749822aa74d2bfe5be447ea4e0dbbfb882f7038a143f3cf34f6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954693, "uuid": "00412d98-6f03-4fc2-ab28-ff48d9e80c72", "value": "T1AF230894B9819A17C6D0537BFE0E42CD3726A388E2DE3313DD225F6537CB92B0AA71", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954693, "uuid": "19b42165-9f03-4be1-8adb-34ea88293c3f", "value": "768:JQGsyO5cPVQEYJVvKwtPFVcmlu6JjnNCR6gPj5+uB4Pl5Q1zL0lkb8FWBMcEZz3:2x+kvH1c76JJMPj5+uBaluyyb8UBUD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774954693, "uuid": "179150bc-e3c1-48d3-bf24-58ddbddec1af", "value": 47936, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954693, "uuid": "9495eb96-6cae-4fd0-a25b-48115cca98a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a9da7349-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774954757, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954757, "uuid": "0f8c98ef-5726-4f1a-9d4d-2213401deb9d", "comment": "Malware payload (Mirai)", "value": "637282f4874a363207ee689407d518b3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954757, "uuid": "ba6c3dd0-3033-433c-ab1d-ad083b69beae", "comment": "Malware payload (Mirai)", "value": "bca785f9414b03e36fd19239ef8ac56a36f5075c9275886e67f36977791af61f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954757, "uuid": "7b1f7c43-63bf-4f41-997c-a97d146b0da7", "value": "T171334A35B6752A1BC8D8997E26F74328B2F4168A24F8CB1B7D320E4EBF2085065172", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954757, "uuid": "cd5c3cf7-f030-4057-bd88-6feb819b89f7", "value": "768:Pj72UF999I26p/d1DNwmOBG4HpX2KlNptBBYfhjCQJwO+35NTScj:P3pF1IDp/nNwTBG4HpmKl5B+fgQJa32W", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774954757, "uuid": "e93212a0-c4e6-443b-8710-554c46c2f714", "value": 50256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954757, "uuid": "5e724b16-9464-4008-b6db-aaa0ef5200b5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d349141-2cf3-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774955837, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955837, "uuid": "a0f05756-9994-41a3-88cd-06352bad2092", "comment": "Malware payload", "value": "a9ff4281ba7a326e32cfef7f49585709", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955837, "uuid": "01d2c4c9-0ebe-4051-8100-d9352372a9f9", "comment": "Malware payload", "value": "b7bd319d5fd116a9514a316599210aac1f30d86391b2fa8fbe5809bacfd2c132", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774955837, "uuid": "3e7bc1c3-3ed8-4307-874f-801bb465caf5", "value": "T15061AFF831D0A93A15EBCF0E73F54989906E45E638E13F7CC9980D211917CA4FA8DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774955837, "uuid": "d073e7c9-9703-48e1-881a-7560316a9c5d", "value": "48:RSaGR9B6FuEAgNR9jYziWkK9TL9kDXbhUzVt3sXcwOWsQGUZVG2Z3q99VJ38j299:RZG6XKT0eYhY8oW3q9SC1pHKX/2mvA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774955837, "uuid": "dc895555-4721-48b6-b9d9-57475e7547d6", "value": 3300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774955837, "uuid": "04679635-a176-4118-9faf-29cb985cf883", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b9b8cfdb-2a90-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774957150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "754e17c6-1524-4665-898c-e9f4ac1c0b14", "comment": "Malware payload (Mirai)", "value": "7fc0290be937420e62d7dbf6c4d5ee93", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "b1409417-866a-4aae-81f0-e9ec117850fe", "comment": "Malware payload (Mirai)", "value": "c572346eba32c3fcdba6500871f90660c69602b33554a3e043934c5389f1e1b1", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "327262e5-5c8f-4415-96c2-0c31a8815bea", "value": "T1A41429557E409E23CBD0677ABBED42CD731223FCD3EA7113EE014B25369A52A0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "58f4ee92-5648-474c-a41a-4cc23a6010f2", "value": "3072:TZG2E+gVb28g5Ua+KQZx0cklRZak9tw7sSA8kHpnDAZTkOdeynO53JlvmD2DbiP5:N/zgVb280Ua+KqqlRZltw7sSA8kHpnDk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774957150, "uuid": "1a69e385-a043-47e1-8564-530d044ebc8f", "value": 192652, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "5f9bee82-cff8-48bf-8665-bc8ddf3caaed", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3bdcbc3e-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774957150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "913d7244-3ec7-4e3b-8f5f-5a5b6d6dd15d", "comment": "Malware payload (Gafgyt)", "value": "2bec0d7f5e0bff4f0f37b99b60383ea3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "96136093-6c80-4b97-b4cd-742e750f716c", "comment": "Malware payload (Gafgyt)", "value": "08ad5b2299e73f782eabdb47bfe7bb5afa872f9b13cf4f4224218553ea0fc386", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "a26b71c2-e069-407e-a2a8-9faefa43f81c", "value": "T1041429417E409E23CBD0677ABBEE42CD731223FCD3EA7113EE015B16369A51A0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "9c127ca6-e24a-430a-930c-8c7b290574f7", "value": "3072:ArTwazXhbpX6GDA0cUMwyklRZakii1OTR9XFaSoSFSWNkyxg7o7Vs1rj60kPikps:W8AXhbpXBDA0zMGlRZKi1OTR9XFaSoSe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774957150, "uuid": "a12e1cba-85c6-499b-ba01-c40ee80b1549", "value": 196200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "786f4d17-f075-4b4a-8196-483426912b6b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2d1c3a59-2a91-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774957150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "f2884f6b-c70b-4a9d-a1f2-fb0d104a06df", "comment": "Malware payload (Gafgyt)", "value": "1d1b210c40c7a382ac5db48b04fd9c22", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "fcd2e95f-6120-4913-8342-1390a4ace205", "comment": "Malware payload (Gafgyt)", "value": "79da68d310cde7b54e086aed576e61793946d4188946a31ffb68351ab8c6f2c4", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "81b9f837-d21b-40aa-b11d-76334a994a53", "value": "T10844155B2E328F5DF671C63682B78961E39833D712D1C685D5ACFA101E2064FA42FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "03fa0035-0071-4c27-af1d-d93d263a380f", "value": "6144:Dw2lRVI+p+ulXlTDJd3yvE9s7kCVaR+mdNN5pqvkwZ:DwcFvj9Szm/JqcM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774957150, "uuid": "455b3f51-f52b-4276-a288-4ca57ca89eae", "value": 263928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "ba16322a-c395-4b2a-bc86-f10f265d7505", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2a2b729f-2a8d-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774957150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "c00ae0e1-f664-417b-9730-4874df36c322", "comment": "Malware payload (Mirai)", "value": "2b4421fe0f519d51c1fdcbc9dc333104", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "61286080-4cf1-4f22-80d7-b24f84de56fa", "comment": "Malware payload (Mirai)", "value": "4e6103d7e55a12da438662b28b5dff5b74cfbf79390ea8d61de8335a2cee2ed8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "36ea1506-58f6-4578-90ce-51d786531403", "value": "T1BA342A55BD415F22D6D126BEFBBE81CA332327FCE3DE7112EE045B11368A84A0E365", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "7c2f6b6b-2b45-493c-9ad4-4a06bfb00e87", "value": "6144:k33F52KxH9ObW+7/+LZmp/MbXV25DvqpAgdZ9qP1g7asF/ckyC4dGSKDwyP1qZ8:Y/xPA/f/Mh25DvqpAgdZAPG7au/ckyCd", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774957150, "uuid": "6204de89-ba47-4c5f-a9d0-5963414fd991", "value": 232684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957150, "uuid": "de365b75-b318-43a5-a7c2-6997918d7591", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3ea4d79e-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774957154, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957154, "uuid": "84aa903e-29ec-4942-a723-66f68e8b6797", "comment": "Malware payload (Gafgyt)", "value": "f127b13f148bf7dc2888162c6ce6ec1c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957154, "uuid": "a85cc6a0-cd37-43c1-a0d5-f631e2f08271", "comment": "Malware payload (Gafgyt)", "value": "a573140330ce756b9fa400cc883463ed3433dba8195909d38bbac719e763ecbd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957154, "uuid": "675ecee8-5e6b-4243-a80d-4b638ce01ff0", "value": "T12B44180A7F541DB3C42BCD3B46A61A0A30CC641762953B3B7934E624BE5BA4F59E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957154, "uuid": "7eba0e60-61fd-4052-86ab-6e28d1991acd", "value": "6144:dCItyCaFG26gwKBnenxKxDSjzhKHgq5jX:xseDxfz0Aq1X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774957154, "uuid": "01cc07c3-1e41-442b-a2bf-cd147d941bf4", "value": 276216, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957154, "uuid": "a477c6ae-a286-43ef-a589-f4c4f7eafef5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "20e3ae92-2cf7-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774957534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957534, "uuid": "deb9c06d-3f26-4cfe-b6af-42eda0c39666", "comment": "Malware payload", "value": "8fbf7fa77d1a9c17d441c8ef3ba93d01", "object_relation": "md5", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957534, "uuid": "f4bd2385-9e68-41ef-b594-6c08489b537f", "comment": "Malware payload", "value": "01c4e86899463aa684a63df6a9083930911f4ac665c099190e4a9cc4e8327693", "object_relation": "sha256", "Tag": [ { "name": "doc", "colour": "#866f51", "exportable": true, "hide_tag": false }, { "name": "hancitor", "colour": "#b5c6fc", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957534, "uuid": "b0260e4d-6c43-4428-810e-8a964fcd22f9", "value": "T1E173C4B2989D90372076A2C8B262F724F2D5A151DB018AB4F3FD521C8BE9E954477F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957534, "uuid": "de250582-a936-4590-a684-d858b73f443a", "value": "1536:ZeqUyp7CAlxpBuWuJuuuku7ufuWuwuburuQuEuTu2uhugusuzuZuMu4uDuJuIukJ:rFdCoxpjUpmvkZOlQGCXybN9ZuirPxx4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774957534, "uuid": "628f37fc-ef31-4663-953a-d6394f1c8eeb", "value": 80375, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957534, "uuid": "9eeec3fe-07b2-40f2-b106-6dba51bc49ed", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9686fcb6-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958590, "uuid": "26d3ba29-32af-4e43-bbca-5ff76f6262d3", "comment": "Malware payload (Mirai)", "value": "9bda7bd9a7d90cb047c503fe5e9c8ea9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958590, "uuid": "fdbe6689-ca6c-47f4-a703-0266cec4e5fa", "comment": "Malware payload (Mirai)", "value": "93046bc18af4e0421eda881fa291e5976a080f2bdb090add27779eda12fbfdc5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958590, "uuid": "b7a08d70-4ce3-4c79-868d-ff3a665d5ca3", "value": "T1AB830A95BC818A15C5D412BAF92E008E331267ECE3DFB2139D205F6477CA92B0E7BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958590, "uuid": "e8353b2f-cd04-4e87-a4d6-8f27ab8671fa", "value": "1536:6on/g5FvCSgnUN/5ePCEmXMkQ0lXTw6P1Cfgwc85uv/5PfOcMI1iXTs+3GUhuD:sFaLP3KMk7ljXPc7vqcg+3GUhu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958590, "uuid": "0c402387-c483-468f-b1be-e9181b40449e", "value": 87968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958590, "uuid": "98d5e2c8-fb24-4dc2-9721-7084b716e0e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96896cd2-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958590, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958590, "uuid": "bc69fd17-c0a4-451e-95d9-721e63ecf025", "comment": "Malware payload (Mirai)", "value": "d15f6f7b935f52663708d62331d27e26", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958590, "uuid": "6d144ad4-bdcb-45a0-b990-cceb6bb72284", "comment": "Malware payload (Mirai)", "value": "7211a118964998029e3336b5b8436b0d2dbc7da7fac0672a99281462f6755941", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958590, "uuid": "7f76c97c-8231-4e50-851e-51c410671653", "value": "T13443E651BC825A2AC2E053BAF9AE558D332177E8D1EB3227CC611B107BDA45F1D63F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958590, "uuid": "78ed35a4-630b-41f1-ae18-b60a3c347ee3", "value": "1536:xnZoe9GT0GVt6+3LNt9jozoRoBuEqgAxMoh+fAfsw:xnCFdoIRNxFhYG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958590, "uuid": "3e659c68-832b-4559-929c-5520082c22c8", "value": 59296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958590, "uuid": "fe81c743-ce85-4e11-bff9-7dfbc04e932d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9698326d-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "47fcb40c-e31e-4aec-b1d6-28844985cfa6", "comment": "Malware payload (Mirai)", "value": "c1819edea3b1fe4a6443ce7cdee917b0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "84a9e614-6bdc-4e5b-a09c-0c963688dd05", "comment": "Malware payload (Mirai)", "value": "a6f1b2d2931f6f1ec08a553d953c87f80f1d9c99aedeef4cf8490cc10bf84d84", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "b25ed4bf-56e8-41cd-9566-51a038bd148f", "value": "T1A0734B36B9792A26C0D0643E11FB4B59B2F127CE26E8C50E7D720E4EFF516506416E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "e59e630c-060e-4359-b902-3f5663c3c8e7", "value": "1536:wNt+9soAvAKNPZAhnSqOWD/H8pfS4SFFMprz:QYEq5DceFE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958591, "uuid": "33dccd95-f99b-476c-bb14-b75c8a7da708", "value": 80336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "9db60c90-9f55-4bc8-bbc7-e69920d067a7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96985270-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "30b14718-0d4c-416a-88d7-e950877dac89", "comment": "Malware payload (Mirai)", "value": "fdf08fb4b17ebf560facec38f83708a0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "af849d15-8842-403b-9fd7-8ac6cf73cc61", "comment": "Malware payload (Mirai)", "value": "d164a1b10d1f32f97f6c56aa0756ec0e86867beefdda0ebc0e74fa62f3049480", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "2dbb7966-1307-4738-bb4b-5ad463ce7980", "value": "T1B7639E25E00A9DA0C08A4634A0E5CE380F23BDC596531EBA9EC545F65847DFCF619F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "318312eb-ad9c-43f1-9538-15c7f98f0410", "value": "1536:Hawl1p2qQAbjwt2RykHJ/ixY/NMB8WNb4/jhCpO:Hdp2qQAX/Hw0W2/jh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958591, "uuid": "60bee000-87ce-462c-a94b-dcb2bcc312e1", "value": 70744, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "d1d2bb62-efa3-4757-ad2f-ed0c594ec5ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96a66641-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "4b451534-5eec-4c43-a778-ce19e2eab5cf", "comment": "Malware payload (Mirai)", "value": "fa66703adb6e98482d2e9dee9741704d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "0dd8cb0f-3fd5-459f-9eda-3f5a86a3dd28", "comment": "Malware payload (Mirai)", "value": "21ed053784a335777dce9913d822feff1be2f9812dfcffd758b27af350705783", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "0ad89d34-ed54-4a4a-8f0d-f1615ffe9137", "value": "T1AAA3A41E7E258F7CF799823447B78E22964833C626E1D541E29CEA015EB034E781FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "81fc1453-f3c4-4f2d-9ee9-569e9582258b", "value": "1536:U9aImucT6Wv4ZgarVYBo8y720FyRJuG0j9KUlzLWyZ2fGKhl4N:zuWbv+XY7y/FyruHKUlzLWyZ2+w4N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958591, "uuid": "113a7b8f-7e94-4a8b-887d-0ad6d43a12a9", "value": 97824, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "fbee04f0-314a-471b-bc5b-b1de71200485", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "96aba8c6-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774958591, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "0f82007e-e9f7-401c-82e4-2e384b172971", "comment": "Malware payload", "value": "bce8a96587f7485a16b22e1bbd07583a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "9431cb6f-1bbc-42eb-89cd-b696f02aca46", "comment": "Malware payload", "value": "0f7283534e998f7dd95dd600cea42ff4dd093d3f2641254e6183736da20ea20e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "b450a0a2-cda2-46ec-b9dc-ff434753117d", "value": "T1E2D45D02BF955FEBC0AECE30496EC217009DE58245C6522A73FCC78C7B6DA5D0AD79", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "83074eba-f74d-454c-a97a-6616b997c2aa", "value": "12288:TKdrSZz7YRlsjJ8tyn3x28cCfP7dCzghgri1hxZrpry9b0C31s32Cg2TrCQFB6ey:bZz00diyY3bIY34JBU9j", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958591, "uuid": "b98c64ad-9799-4d75-a5c0-e4b036786f51", "value": 622164, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958591, "uuid": "068e7e37-1cac-4cab-a5a9-89638e77ef9b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf45ee0d-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "791dbdd2-cbc6-4fc2-bd4d-3bf606ca1bd3", "comment": "Malware payload (Mirai)", "value": "5b524bd3bfaf424d0290b271255529eb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "049cb7d3-4bc7-4aa8-9818-df48b891b6e6", "comment": "Malware payload (Mirai)", "value": "e4474ca62d5f68ab2993cf32edd404f5a75c366edd2cf463e5a1250a1157642d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "18e9b923-fb25-4633-8726-e6466c16be7e", "value": "T139734B4271280B47E5930AB42D3F1BE05BBEEDD031E4B684695FDB668A35E371086E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "a031db13-0ad6-4dfb-906b-6d21631a0791", "value": "768:k1OpIF906jcY+C0rRixDTAkdlS1ZEeB+uJmHHVPPfSoMeaia8746bHGOnrI+rRY5:5JXJrcUkdM1WeEpV6e74qFY1UIoE9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958659, "uuid": "c243cf2f-d6be-4198-bfd2-9c6c80734311", "value": 74848, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "b4a7ca76-8972-4884-8c6c-e97810a1e32e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf5707c0-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "0d6180a7-7a44-4815-ad13-db601025ff62", "comment": "Malware payload (Mirai)", "value": "b1c96a45ad9211a849c82356209f0a1b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "ee128ae6-e83e-47d0-9b72-44e6a8b23434", "comment": "Malware payload (Mirai)", "value": "9267c307b97d7bbbf3124a86386843c3d904b7c2faf207830195177033da2c8c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "00677c5b-eacd-49a2-96de-042ee3529da1", "value": "T187732991B8C29A22C6E0137BF96E458D372563E8E2DF3217DC252F6477C641F0D67A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "1d629b15-e9f2-4167-a464-8403ba05d75d", "value": "1536:Z0lfkUBLAtJQ36bwTru4Op18gTdIDg3ahWnUripX5WzEF35mBi:qlROkguDgqhoVXV3K", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958659, "uuid": "781ba5cf-dd52-45ca-b387-43db88e56a2c", "value": 79256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "9e004891-7599-4d22-af64-eccda924f775", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf5be392-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "b6f7680b-ef5d-42e7-9b2b-2bf3282f08ff", "comment": "Malware payload (Mirai)", "value": "199aecfc6e8186f718d6a9362613667e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "6d13f8ad-86f5-49fc-8254-c94b202a6b42", "comment": "Malware payload (Mirai)", "value": "0b609ca8a0c5140953b8754b0840441817c49087886215321523e17fa98c5fd2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "90be8fc0-ddfd-484e-849e-a186777d80bf", "value": "T1D3733A9DF8024E3CF94BE5B954560E09A92467C886C30F27B7ABFDE36DB30586D06D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "f213b249-a11f-4b9d-add2-8ca627678696", "value": "1536:uWvGEjK4q1RuQJ2KBMUTIj8WhjAlqrqLCSadBZ1:uWOEG4SRuQ4KBMUEDFqLb6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958659, "uuid": "7e7f7212-cfb9-483d-af62-a54904be4477", "value": 76420, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "cf14f1ee-9aa1-41d0-8967-bea2b00f9638", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf5c084b-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "30fc0cc7-243b-4b97-86aa-3af06230740e", "comment": "Malware payload (Mirai)", "value": "b9736e10097474c0abba3755bc1ffea1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "51082e71-f09b-42fc-b105-d8077e7a8796", "comment": "Malware payload (Mirai)", "value": "0c8116208bdc6b2022e89a07eb513b29865e5174edf50a94d8e6f3fdb965924a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "3a9eaeb4-461d-472e-bee3-f7cbc41dd9e2", "value": "T1F2634BC0B583E9F1DC16067430A7FF339E36F0B6622EE98BD3E46963AC4664194079", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "d8a2f651-ef51-4b85-a5e1-57d987c3fb64", "value": "1536:HafAEdoRs3D25y5uScmhYr/pNeITYN7tNEWNc5SRCFIVX0ivR:HeWs3D25y5Tcmhq/p4ITYNbKJFE/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958659, "uuid": "a3db238e-5aea-4d3a-8558-5aac133315c1", "value": 70416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "8bb7a0b4-2c81-4c75-b21e-4fb26484fc50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf5c48e8-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "af504546-0632-4504-aa25-52f95c40d3e3", "comment": "Malware payload (Mirai)", "value": "3a815c3d0ae68ed8f02ada092e18c836", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "3004eb70-2d95-4000-a711-dac863f59d7d", "comment": "Malware payload (Mirai)", "value": "2d0510c7fba47222afdd96d1ecb0c814830863e4610fb17fc86fdb088d6e0b4e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "fcb4851a-8225-40e4-ad92-84dc2618cc50", "value": "T18AE35C46FA818B13C4D517BABAAF01493332A79493DB730689285FB43FC6B5F0E679", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "c5babbca-d2d5-420f-9d0a-5702af287966", "value": "3072:iQHlfs+leH9waS+iFAdKwH5m3m7phtcEfXfMYM/9ij3We:iQFfsueTZKwH5m3mdhtXfLM/9KWe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958659, "uuid": "b5b9addd-fff5-4926-a3b2-24da26bda1d7", "value": 153787, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "d64c2ef4-f3db-42ed-b8c0-ff89162ef162", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "870573fd-2a8b-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "2ac9fb8d-fb5e-46dd-8625-39b75720b531", "comment": "Malware payload (Mirai)", "value": "489633a192dc57aaa974fd9c01136db8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "3b27c8c9-c5ae-426f-bbcb-c04cb32f2ae3", "comment": "Malware payload (Mirai)", "value": "c0b100c58436263927df63243256623067787f970a9a26dba68f12d5698bedd8", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "080813af-59d3-4eca-9da0-5faf3069aeed", "value": "T11AF34A13B89494FDC496C2784BEFA226DA25F84CA035B52F1B947F167D9CF20AB1D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "824633bb-0ef5-408a-a014-b0003a2231c4", "value": "3072:0+xTGNs+s6daW20T5xk+8QbFlFshfoEpPda9M6OyO61RqN89:JTGXwWJ5xk+8QW8hOSbqK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958659, "uuid": "14e06434-2ffc-43d2-a640-670b87cb4858", "value": 163968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "a6d7bf44-78bf-47d4-b833-4346a6fe281d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf5ce62f-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774958659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "7fb533d3-fc55-46a0-9830-83663d73319e", "comment": "Malware payload (Mirai)", "value": "819ceb74cb4097b1cd081ec63591bde1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "55cbc0eb-c439-4d27-9144-a4b77b993ad3", "comment": "Malware payload (Mirai)", "value": "4eadf80e85656f2c30bf8656cd5ea1a46cfb2557388b911b3644e659900513fe", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "e35d6ebc-5a28-405c-959c-d3fc256d8231", "value": "T1B9A3C609BF350FF7E86BDD3709A92B05198C551A22E97B367A34C858F64B21F19E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "e72f6657-4e5d-4098-b198-902db11c4ea7", "value": "1536:dkkdyTy3yryaidLVeMvW9eqzrhV2rRlspIwVzQZigcTNcZ:dkk0UMSJBWkorjqWzQh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958659, "uuid": "0aa3ff0a-0945-4d86-8e96-3db2c1d6ab77", "value": 101680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "9736e4d0-1b3f-413c-8016-93b14a1fddec", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf680b3d-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774958659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "653d2b92-908f-4ef1-83c8-af80623c5257", "comment": "Malware payload", "value": "eb1079388f7d9c0ae5cf29e95ee64973", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "48455418-634d-4654-9d67-b5d3df7ae26d", "comment": "Malware payload", "value": "ba2e6b8e47a17f6e8310fcbd29863f38162e047cfc1d2dd98c7e23a739a4cffb", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "e3dfa0bd-c8fb-4499-8525-d2140a834a08", "value": "T15AF09E1FB19D2820A334002FB6BB409CBB8A59263A40CE02B242ED391B798C8754E5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "36e936ae-9bd1-4c86-bbc3-071cb9b59499", "value": "12:e/51651eI10/KP4QipAS/zYrnYXF9ZhsW8l6m2yXvySiQVRH:e/H6Heu0/zApObhsHqSiOH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958659, "uuid": "2957574e-0486-482c-86f1-8c1c5877d528", "value": 501, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958659, "uuid": "4f123c94-5e00-4b15-8693-36a757a1c83b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "70a9e2fb-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware payload", "timestamp": 1774958956, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958956, "uuid": "85cbf46b-4551-44a3-8b24-78c49ed05e67", "comment": "Malware payload", "value": "a0ca82ea2718cf0f6b6b2a09e26d9895", "object_relation": "md5", "Tag": [ { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "Win32/Malgent!MSR", "colour": "#4f9551", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958956, "uuid": "0ab4ac10-4c75-4eef-b497-1da13c4f32c3", "comment": "Malware payload", "value": "ae9ac59a8a40daf302d0ff0d79c085d29023225485fd25484d133148287ba8c0", "object_relation": "sha256", "Tag": [ { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "Win32/Malgent!MSR", "colour": "#4f9551", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958956, "uuid": "257060c5-da08-4403-b79f-9ceddbf41b77", "value": "T126573321A113F6725C9E9C122673BB18A57B2F54F47D6801C32A26EF117B7938837D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958956, "uuid": "ea3c5c05-3a4d-41af-97a6-adaeb6f77202", "value": "786432:bXtaxUdH4fodAqh7U9yu6Qdl1okJUEE6R:bXt4UdYfDqUQutdDlEi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774958956, "uuid": "476cbe80-cb71-486e-9b82-7fab76ace6a7", "value": 27280415, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958956, "uuid": "aeb7261e-4b68-4fc8-a937-b2623bec20d6", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2f4a63b-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959068, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959068, "uuid": "49bdec7c-a7ea-40ed-8f4a-36a0e1ed4579", "comment": "Malware payload (Mirai)", "value": "588d407854fa17c0e892636810b75322", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959068, "uuid": "6095e41c-8d81-4ed3-93de-e0bbc8793e64", "comment": "Malware payload (Mirai)", "value": "c4c585dd6ef3dfb24d73300f8ab36539914c6b0f85770c4187622206352287e8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959068, "uuid": "832531a4-f539-4101-8ed4-79fa3098b787", "value": "T120B2E16C50940E09D85B40FF9AFE05E6E66184830AFECBD99F270CC3E2B78A2791D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959068, "uuid": "ea3a2ecd-8029-451b-88c5-1ee4c7d55269", "value": "384:MniiBi3f2PSrf64K5WFSlvNjJ6mAN8bhmglJbN2EIKHT0P6+PbhDYOK6sNrheCVM:xiBiv2PSbePxNNw8dtlJwEIGT0P1Pbh7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959068, "uuid": "5571d21c-0555-4523-9d5c-907ba701eaf5", "value": 23440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959068, "uuid": "2af129a9-ad18-462d-88b7-375046abc89e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "476e3efc-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "abfe79a3-9998-4044-a013-b9d86803b752", "comment": "Malware payload (Mirai)", "value": "41af93a0fa236ae436fb94952175dcf8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "2619a1eb-1b90-4ff8-b9d5-7f3cae9a20bb", "comment": "Malware payload (Mirai)", "value": "0253355d66c4f314ddb4b5a15b7b1dc205f2c9fd7852319fe5b84b54f98ef93b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "d7ea5b6b-2ad4-4f5e-898c-1d0ec2201e79", "value": "T1CD639D39E41DA590C4564178A8E98E342F53F08883B31EFB6EEB42B2144BD74F915F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "24879254-440a-4e0d-9edc-836732891cfb", "value": "1536:FaoOwtR/WdRh6LQZfuwW7RG/JXn7/qC0C9B:FYDdRh6LQJuwfJX7/qC02", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959317, "uuid": "f32a3a6d-daad-48ec-aa30-9c4b4ee5a2ed", "value": 67728, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "4f8ae5b9-5446-47b9-83fb-7d01c28bee6a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "476e3ef9-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "b99c56e4-975d-479b-9b4d-1db15f6368fc", "comment": "Malware payload (Mirai)", "value": "a4ef841063e97d9e55f3b6a47a77bbb5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "8d55240f-e849-48d7-85fd-19b7a6fefc7e", "comment": "Malware payload (Mirai)", "value": "114e5ec5f210360cc42fcad1595665a43a3af92e537d47ef902ade871b8ac200", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "8d3b3441-96bc-483b-aeb9-1856aac1b58c", "value": "T1C1A2D030A3460D71CA310E75BA6ACAC1F3F34A78C17A32A1235172DC667159B5B7D1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "a3738e53-dc57-4651-a785-685274450b73", "value": "384:Yp52IVSFSqEq5uxPrgJwa2xKQuDI+ofOPwwUahymdGUop5hFC:+2IVz5CAEJwa0eDLoUVs3UozrC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959317, "uuid": "40eb3869-45f0-4dd3-957b-9a3bc5272875", "value": 21976, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "ef0bc11d-f1aa-49c4-85fe-fb797ed3bd05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47752522-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "f29693af-a1e8-4729-bfb0-bd5556741905", "comment": "Malware payload (Mirai)", "value": "58120ba940e70d27c8bc3d5ea74f0106", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "c1df701f-608a-4a17-a5d6-acb0dba1e53e", "comment": "Malware payload (Mirai)", "value": "45894380e529a897d0f9b04071efbec44d86940cef1923df015deedc350746e0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "c2af3351-a166-427f-80ac-752edf1e9b15", "value": "T1CEC2D048170883DAD862C0F9A3A65F511EE51B63D562BC0B6E7CEB031FDA4913983A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "b9e9a079-33b7-4da1-8ce8-9cecd68a2080", "value": "768:Zz7bOFU3On/ObVfqtXIJgGlzDpbuR1JeeV:N7bD3OneVrVJuceV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959317, "uuid": "2cc30d6c-e076-45a2-87b8-abe5e42da314", "value": 27208, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "21512fab-a332-4510-9c87-56383c302e78", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47765f4a-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "8f63b207-e8f4-4256-b7fd-ef0674bf588e", "comment": "Malware payload (Mirai)", "value": "1553574b7ccbcd54f05b88c1518190bb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "8aef084e-154f-4177-ad22-09f38f666c60", "comment": "Malware payload (Mirai)", "value": "d3f9064327fa42deac47114ade57446f32b9b356681be33d7b003e16d9cf4204", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "b7c44a81-9215-456d-beff-88c3cf62dd6b", "value": "T187B32B0BB25144BCC185D071D1AFB037D935B4E51A21DAFF3AACFAB52E42F886D05B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "53e876aa-7fff-4d51-a0f4-2a449850d28e", "value": "1536:4cr6axz9CYWgUm7tIM826Fb6o6PgwN6xweK9qFlUMhYJ8j:4qHlRUm7pBUD6YgqjUfk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959317, "uuid": "5053d532-d1b3-460f-af33-bc61cd7fb539", "value": 116632, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "f9e23308-cf64-41cf-ba8a-8634008305bd", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4777cb59-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "3f546d25-2ea1-4ed3-b16f-9a94234c25fb", "comment": "Malware payload (Mirai)", "value": "75c861b0cebb3405362400aad26c350a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "9a47bf75-cf16-45f9-bdab-2532db8c6e30", "comment": "Malware payload (Mirai)", "value": "32ace463b3ef724a87ad97fa7dd17a6578981cf060595fc092bb089692c04ce7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "96ad6d5c-4cee-4dcf-a766-9710a45aba5c", "value": "T1B8733B2275392F27D0D0E47E22BB4B5572A16ACE2694C68E7D730E4FFF22550A8439", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "1dd8fcd2-2a16-44a8-93a3-0485bed67de7", "value": "1536:JrQNNjS9IX7XmB6TcHfeYcW8yoqsNd3LXoGWiM8eqUDXcQ1YAHWuXVQ:mNEEB6yFLXHCXXD1r7XVQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959317, "uuid": "188c409e-167a-4960-844b-3eb3cdccc63f", "value": 77792, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "90ccff4a-3af8-4462-aff3-f2c4d6e7ef56", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "477ce692-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959317, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "e084e780-7452-4057-b88f-3af7eb3b4835", "comment": "Malware payload (Mirai)", "value": "0cf8ec8d5af0972b66ad9abdd276e22a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "af32e129-47d5-4da7-852e-a20c199aa213", "comment": "Malware payload (Mirai)", "value": "d619e3024f32eddf2054b7198d8820d5d2dd5c12d27920150317d13f75ee3c4e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "2533538f-70ab-4731-9b0b-081f4dbe9023", "value": "T1F523F1F0C174AC61FC81EC3ECE644C4725252A7CE1BBB0623B619F38AD9A060177E6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "50db928d-9e61-4c61-8331-210f9b69c0ff", "value": "1536:OVz6m1gETHxaSpV0WAgcNw/yiHLhxQXsVaD:GPgETP/7JLhxQwU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959317, "uuid": "90cbb4b3-9c20-4736-b175-30eca22b421c", "value": 50060, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959317, "uuid": "7a8083c9-195c-4bea-b58b-7ab6983a7f0d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4961610b-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "2150a95d-f3fd-4e82-a887-6c5212ab88e6", "comment": "Malware payload (Mirai)", "value": "556e453a00ad2dc741c90af763e25098", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "68bf4edc-0fdf-4635-aba4-d348afca1d12", "comment": "Malware payload (Mirai)", "value": "a55f39dc610ec4dd3918dbba2997644d710ae61c2c5bc1e987b5e64a6db82baa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "1dc914cb-f6f3-4cf1-83b9-978cf4696084", "value": "T134C2D0B791B7FBBAE8B2F1BA6A6D3194BC6534131459072F46B8A1EF0C72E4C0D135", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "ae25e26e-dc78-4b41-84bc-75352e0a31ed", "value": "768:8Dkm0M2dvdG8f18JkYw2vTtzCzSPdFvWIVx0vT:wkG2dFHukYw+TWSPdF5ST", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959320, "uuid": "bb5a8fc0-292e-4bf7-ab5b-7a9b5dc1f68a", "value": 27780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "d9ce3cfb-edd9-4dcc-bf7a-c10b785b835c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "496e74cd-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "8ab8b00b-7d2b-4f91-9dd6-91c6dedae9ff", "comment": "Malware payload (Mirai)", "value": "9128c97d3d14cc6c843d544e66bd62c9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "aa64ba38-11ca-4fa1-ad6d-cc18274466e1", "comment": "Malware payload (Mirai)", "value": "9779011a3f6b3fd45fc0fac60aad08cf3db37689ac3a5595c4d2a725b8d99e53", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "c2e898a4-42ad-40df-91e7-27b12b6eecaa", "value": "T14CB2D0B01603DCB4DA2F6836ECF2524A3BB3B6F9E6E173924C12D564A8C950529F4B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "c7f74765-293e-4ec8-9030-bb91e27aca5a", "value": "384:+YvkQe8o/4AYoU1BHZufxTJqaSuvzLXK7Du8sTD2Lf3P/+NGhymdGUop5hV:jS/t/q5OTguvK7XsT4/+NGs3UozD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959320, "uuid": "3b99ffd7-c58b-4f41-856f-5899dcec5aef", "value": 25708, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "78f9ae06-019d-4018-a2a2-77b3f98c6808", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49708160-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "12dc8fcc-91f1-40eb-a54d-ae7c4ab62d61", "comment": "Malware payload (Mirai)", "value": "ac09193cbaf806e293a5b4177a6592ab", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "6a39e5fb-0772-43d5-ae14-b084a3e62e04", "comment": "Malware payload (Mirai)", "value": "abc9b5b646578de88f3beeb6013aedb233131732c263c32e9efe596c2bf243bd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "d3fcc304-65ac-4ecc-8d77-c617d75fc110", "value": "T1D0C2E168205A641DC58E07FF254E7B8FE42026DEEA9ED3433449A14C72B3EA9B4B85", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "f4778f18-8bff-4685-bce9-d9bbbc49a202", "value": "384:M4xtbDVzWOm5onmDT0DG6IKt0tgzU0TItFWUNvL5EhP3zUOjG1LrxS7I0YTv1RF:pEaM0DG67CYRTPML5KjUBRjF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959320, "uuid": "eb7934b4-44bd-43c2-8047-82aeb9d08f2a", "value": 27424, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "27bbf007-3aae-4c4f-a672-f80668c0e5ab", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "497120d5-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "203c84a4-cdb4-400e-823a-c8d793812c25", "comment": "Malware payload (Mirai)", "value": "6b42876f1879f2f884676979208df912", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "01c42197-ac58-4d4b-b942-acc9167c9c7c", "comment": "Malware payload (Mirai)", "value": "78471120e4d5bd409a59d2f12d1f7c5cea94c1f818fd92db8d3bf5647ebc5da2", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "b6a779a2-6901-4d28-ba81-a326bd53f234", "value": "T128631B99B8024E3CFA0BD9FD54164F09ED612391A2830F2B56ABFDD36E731666D02D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "c8cbc96a-5d33-4310-aaf3-bf5dbf360152", "value": "768:Re+HZ2k4RgkS82IiAh9q3gdsnpF7VuXhZnvH+Kvr5a9p8IA4QS2v+3fhL9EA2TbB:RqZ0WSm+3fxCAib8s6MFkPQXTARZq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959320, "uuid": "bf523415-b100-408b-a16e-c43a3b3f1656", "value": 72828, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "26b68eb5-0a50-4190-bad3-b0e5900752e9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49733faa-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "10419609-decf-4977-846c-96ff7061bebc", "comment": "Malware payload (Mirai)", "value": "b0fbdec136bcc877bb0a87cb678e920c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "3976b0f9-b07b-4054-8793-7d95fe60bedf", "comment": "Malware payload (Mirai)", "value": "6638c6aae5f21777821af608664aa93598dad45dd84510045f8aa20b7ea8f71d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "240b46c0-945b-49e1-901c-949516793115", "value": "T10EB2E10D3AA61A4FD5A5D0B9582E19DD2832F2405AFFE724333F019EF21B165EC28D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "d6a65cfa-2c7a-4526-9a34-1856e5f1fedc", "value": "384:MzdHFiFkEAgsHff1OPg1JZB4T9mHZP7h2s7oCyCKYxdkKyd1M+v1R8:o7ivZs/fIPg1JuUP1V7pynkdkKG1H8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959320, "uuid": "b662af12-f761-45ee-8f86-4f5603f11ea7", "value": 25456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "4899c8e5-64af-442d-b009-19a9e8e67830", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4975c260-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "95ab5d78-af35-4e57-b7f9-ca4396ba86ee", "comment": "Malware payload (Mirai)", "value": "160d0a15d530fc906c4cf874f0a1e677", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "546b3424-9577-4aa5-b7ed-4c159eb51831", "comment": "Malware payload (Mirai)", "value": "cf4a7efd5a9eef3fa50ba1463aa7ffef36548c11486c76b43b90a83ae304d29d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "8d0ec02d-45c0-446b-8007-4f1033b63c8f", "value": "T1A8D2D02CEDA95889CD786CBF8D090766CD1120C0316D4BEAB301CC59FB6B98E7559D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "f1472adc-1768-4e1a-b1e9-cf565e77acf6", "value": "768:8IzUjM8UgTFbCgNjNJG/KUy+g/gJ14Wd+:1Uj8gTVT+lLF+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959320, "uuid": "5e53c2c4-f9ba-4aad-8d52-a2a5133dbe25", "value": 28592, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "30dd6225-a49f-4912-a4a5-88053b5d56e5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4976f166-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "12cdd133-85ea-44a2-bbbf-c27bf4742123", "comment": "Malware payload (Mirai)", "value": "4a00c198153af6a22e57c09f488b9747", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "b257a0de-6906-498f-884a-229621707fe3", "comment": "Malware payload (Mirai)", "value": "757de8284ef3595bea3dbcecb1effca1a7593ba33b4f1fdfe7bdcf28b8e3a315", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "a3ea6ccb-37c5-49d4-8c8d-e4e4803518f3", "value": "T1925182C592856D326CB7FA23F6B6C128308190935CEA7F99DDD8BFE4868ED2472407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "7617e1ef-4189-4a5e-b155-d0eb29b01283", "value": "48:vp47047N7hp4v46Gp4gn4zPp4f4KWp414oUp47147o7Up4fO43bp4E49Rp4h4cgJ:vq7/7N7hqw6Gqg4zPqgKWqeoUq7e7o7U", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959320, "uuid": "62ae23f0-08dd-4dab-b2c3-5df46230d752", "value": 2940, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "8e999097-c7b5-4352-bd30-43e87a983db8", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "49816319-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "c97ab98b-e325-4a6a-a14d-54ac8078d9a5", "comment": "Malware payload (Mirai)", "value": "14dcd7065fef86fb0bc2178a12f59ff3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "2c53c90e-9152-4f0d-864c-7d1801959294", "comment": "Malware payload (Mirai)", "value": "782606738079703fc7ae546f5cd5904e530e318d19a48e4a64309a93c4c623d0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "aaa02b0f-d39b-4a86-866d-e1b5e50b1269", "value": "T1E8B2D094DD459ED8FF63DA709095F3F6BB610B5AB321DEE220885F40400367B6648D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "d0644a99-303e-4aca-9237-56b19bd4d5c6", "value": "768:4HkIFvF76E/faq0WmsZmwT4F4uVcqgw09x:4EUF7TLTDcF4u+qgw09x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959320, "uuid": "4576452f-9a86-4ff0-969b-bca566095ed1", "value": 24808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "95d366be-525a-4e23-9802-e26294dae94a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4981b264-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959320, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "346c4667-3ebf-4ad3-b573-74e677a0264a", "comment": "Malware payload (Mirai)", "value": "4d210b6a01762b8bdd55ab5153825c29", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "e13a99f7-8070-44f4-b835-771db7e6796c", "comment": "Malware payload (Mirai)", "value": "d04a50371f6a9b25d19475bc8455997d2a2ce339534373439ebe04220df3eecc", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "a0ffe999-ec35-4f8e-a5be-c5ee948a91b4", "value": "T1F6D2E132422ADC77CA609ABADF6499C52B4D277DE5F97434001141D1F6ED6C22AFE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "99ec564d-5a4b-46bf-8956-e7cc63816311", "value": "768:WAX6nz/BKOdwVYec1UMk7SvzOXDt/iubW2QpPDAJqoDp9q3UEL5f:HXQ/BKOc35eviXDt/iuCPhwDcLh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959320, "uuid": "17fdbc7a-0099-4f57-99f3-c0030d030fd1", "value": 30440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959320, "uuid": "19b69aa5-8988-4582-b78e-88cbc95b9b01", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b2f4242-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959323, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959323, "uuid": "63bc8e7c-9188-4a8f-bee5-5f77e9d4720d", "comment": "Malware payload (Mirai)", "value": "83be5abb8743e98b2a9cce66a499e6e7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959323, "uuid": "057d627f-6052-476f-a2ce-5909630d480e", "comment": "Malware payload (Mirai)", "value": "81624654cd84695cb1c881a0c5eec8ec6d7e2df2d515f9ffb08c72e522a64a69", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959323, "uuid": "9a79859c-e786-4a29-8317-d5f46cc12223", "value": "T183C2E10C0B22527BCDB49936A37E6E6B589C5C92A33E03159F59ACEB506C427B7074", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959323, "uuid": "760c4fe8-5c9b-46c1-8714-b280fc90f672", "value": "768:1EJmFYSeL48otg+0UJCxOAL+9mQ6uvyseyrA:1EJKYSs48FBWoOg+nxv8y0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959323, "uuid": "2540496b-00e9-4490-8535-ae031c8b8f64", "value": 26888, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959323, "uuid": "51d69fb9-3d4b-4689-987a-55e09861be7f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "88f47835-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "574c7a44-c345-41ed-bd32-0380469ba5ee", "comment": "Malware payload (Mirai)", "value": "f5ce2e105a5fa3214cd34c160ab02dd2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "dd6292ef-5e7e-444a-bb1a-0a0f702342a1", "comment": "Malware payload (Mirai)", "value": "2f8785d8135c19d6fc8b29e12bc81bb260d15e50172808bd289e1203479d5383", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "07c943c1-fb51-4cd8-b258-85080496299e", "value": "T106B30946A9429B11D5C631FAFBAF414933136FB8E3FA7111D9206F6023C699B0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "dfaccd7b-aabe-4522-a790-8d9241319d3c", "value": "3072:pqiy9qVvpOFnQfG/7/0VZYPY9On5NaBF7h1uzagz8fBZI0cMbZgf:pqiJKdQe/7/0VZYPCK5NaBF7h17gz8gj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959427, "uuid": "d5caf048-10a4-443e-aade-7f1ee6c5286f", "value": 112656, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "2f2a3cbc-b3b4-43ee-90dc-0130475978fc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "890b4ed5-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774959427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "153368f3-4a49-4096-87d4-da555e44321d", "comment": "Malware payload (Gafgyt)", "value": "f21a9b74f3eb953f7988b2f5c371fb2c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "cddd56ad-1010-4e6d-943e-e60ece4e1a0a", "comment": "Malware payload (Gafgyt)", "value": "ff3d8b267779baa521248ebb38be498e55cf56304029d15bda87f476b8bc6634", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "5308a0b3-c5b7-40ba-a0b1-5dcbcbad0dd3", "value": "T12CC3D506BF114FF7D89BCD7346FA0B05258CB82B16B92B757534EC58B24A1CA1AE38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "c721c391-4188-4e3c-9acc-d8239eb369e8", "value": "1536:j4w4zW/h4SZsqEz3UrgiDSAPrfO4jaXbzjZjCfPNXm/iRK0UgSSWt:0xW/rZsqcUzfHjarzjD+XWt", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959427, "uuid": "1366e60d-1ada-4421-97ea-d0c87e2d6de9", "value": 118300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "291de30a-9340-4061-a80d-4ce09ca373bd", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "890c0ac5-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "2d84a57e-53ef-4d07-a823-3d4fc37fcd47", "comment": "Malware payload (Mirai)", "value": "f0bbad033d7ea9102676837b0b3e9f21", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "48c4b569-73ac-4283-8db2-1a548a0bacc1", "comment": "Malware payload (Mirai)", "value": "fc3082894847c2111f850eaa72d7a77178792e08124c92cfcf689e89283b787c", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "0c6338c3-bc2c-421b-9eb3-e04eaa523011", "value": "T14C930C46B9528E12C5C212BEFAAF415D33136F78D3EE7212DD20AFA063865DB0D776", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "703c1975-3efe-4fb7-b2af-82b1839097a9", "value": "1536:gknJxjhCMsBMl3EVGpOFnbRfGqtCMy05LyHQ4YE86v5aeyXc8aRQeiC4VfC5lzcZ:TtC5MqVGpOFn1fGqtCy5GHQ4q6v5aeTQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959427, "uuid": "6a0be558-3fc7-4965-ba28-9400b74c7c82", "value": 96864, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "602af9ec-00d6-4a8b-ab62-1fccc0ef86da", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "892fba75-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959427, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "50c1f53d-354c-4209-95ba-cb5ef38d5f5b", "comment": "Malware payload (Mirai)", "value": "be15b8888d46be9b12a719416b961af7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "a7b72e41-36fb-49a1-9ebc-08a7b1feff7d", "comment": "Malware payload (Mirai)", "value": "8c98ae6639806e4f9536988eeee729061fc3ed92d267cf3cffbed0fbec8f026b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "197203e9-4209-466a-9a26-4c68693c4161", "value": "T16A83180377090F43C16329F026BB1BF097AABDA519F5B284752EBEC59271EF12181F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "3a728a76-54d2-48b3-aa42-193b8eb52229", "value": "1536:VLblgTewtHfOoA4171kBcyQDeWKDDqIiSmJXSZf2ikBIH3j8JF4:Vy/WoJ7em+vm3ikcg4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959427, "uuid": "38aafa6b-cbf5-4a9e-b93d-1cb9e9a643e4", "value": 88732, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959427, "uuid": "135b61ad-e3d3-4e8b-a3e9-b18151fc102e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91a83172-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "d4c1446e-35cb-4a26-b585-df684ffa09e9", "comment": "Malware payload (Mirai)", "value": "92402a950220b67e6ce82ecf733742a2", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "1b240f22-798c-4766-abf4-73c8e49abaf4", "comment": "Malware payload (Mirai)", "value": "769a028cd6a9c914b816e08dcaa80cc159767d9bc8a6c13a98b36f247e3e27af", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "3c1695d9-8a7d-4583-8880-ace16e2ea7a3", "value": "T1B5932845E393E5F1D80705B001ABF77A4930FD331624D96ADBA4FFE2AE315C2A1963", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "ce76f323-dd4e-4132-a685-8872e3c608b1", "value": "1536:NJaUfdQD/bb2sBBI3eQYmUC3100x7u/oVLuAasxJrI:NJNYn2SBIr6kpYApf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959441, "uuid": "76d3ad56-a85d-4ade-aeab-27e53c9b44e0", "value": 90476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "6a4d4d3c-9ce8-425d-90c3-9a12866ea413", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91bd1d39-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "dc074008-c247-48b3-af96-25d86de45545", "comment": "Malware payload (Mirai)", "value": "a9114ed4d67aeda5db3067c0d7493bc1", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "cd279db8-d233-4af7-b5b8-b2977bbd11ba", "comment": "Malware payload (Mirai)", "value": "b52c5013811928ec59cf5d75d3eeb13907888468170c54d2650dd50fca5df090", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "d02aa3be-3120-4d2b-ab44-217209714ea0", "value": "T1DAA30887B902DE7FF80BD6BA049309197531FA660E530B76B367BD93AD310D41926F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "d39387b9-e418-4e0c-8917-d6b41d151b3c", "value": "1536:Xyb7fahHx2asY7stwZgNU68FF4PDW0gsRmDZYvT+Ff8OUdKxcS:Xyvyr7sY7stGgNU74ZgN+tOUdscS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959441, "uuid": "af011f01-26e5-4250-8ab6-e495fd8d12ac", "value": 99684, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "09b70fbd-660d-4057-abc5-d1c971126fc1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91bddaff-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "bda1a028-ffa0-43e4-8ecb-4fd39be699f4", "comment": "Malware payload (Mirai)", "value": "817da11e8ac66bc02027faad43381b38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "5ffa82da-2fde-47c0-a14d-d423f96210d8", "comment": "Malware payload (Mirai)", "value": "4b1eef0b88f3859ebd6e1285870b1d3a98a1874f26e070b34118bdeafee05488", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "574dc6ef-2329-490f-8da8-cfc3a9deac71", "value": "T1B3733923EA16AF46D14761F0A9F64E740B13FC2A8D671EFAA564EDE881439DCF1043", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "983465aa-d434-44f2-a2b3-3da3165f119c", "value": "1536:Opwtq/0FORx0SFXqRgljniSIjZEXnK82nG7cuGc8KCGWUzgwuI:Opv0QRxJ0WkjWXK8bTGc8KI4zJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959441, "uuid": "6c55a48f-4e29-4e6a-8e25-097cd8c8eeb2", "value": 79300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "ef926966-e3aa-4eaa-9754-4333de758dc3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91be1dc7-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "88f52a59-fe71-40ba-af18-2ff6ace9037e", "comment": "Malware payload (Mirai)", "value": "1476e7aaa652d4eca8185f20a86bab01", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "3f9232f1-38e0-4e6c-8a00-433eb13dc0be", "comment": "Malware payload (Mirai)", "value": "96aab64881eb23c35d327524b7713f1ef70fd9f36732ccee56c699a7f15fbd1f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "cae81b41-4cd4-4c09-9155-9ddbf8b71edb", "value": "T1F383E942BD429F13C1C221F6FBAF059837266B79D6EB3242D931BF9023868DB1D676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "e24671a3-c033-4ddc-a58f-afd674722d60", "value": "1536:/KDLhQ3BlLywjmConIxqPONH62KBJw3m12PKPrzetGgcImGj0AnSbfuba:/KDqXjmConIxq2F62K5UPQrzeiASiba", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959441, "uuid": "fab8b44c-9b61-4fff-a5b4-9f95c1df1f4f", "value": 87436, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "3bcea507-9032-4085-82b1-a541f7a2e773", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91bfc163-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774959441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "0b7da9b4-1f53-43bb-b070-647be72b6250", "comment": "Malware payload (Gafgyt)", "value": "f3c30733a9e69cbe50fea6e9690a4002", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "34b721aa-846f-42c6-ad94-01c950b5eedf", "comment": "Malware payload (Gafgyt)", "value": "1236442b01aca5da8c0f3c32606a88d5d44c305e9b7792792f67ca98db202c7e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "2415af39-aea3-48ae-a86c-e42636ea12e7", "value": "T1C5C3B91E6E21CFBEF65A827407F78E31965877D62AF1C585E16CEA400F502CD241FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "f766df58-e005-4449-97cb-586ea478f277", "value": "1536:tw4lPfv7d7Y/YL1dUo1DNNKHvntki8hPDoM1ISWlKnKevNeThZF:7lPfDdMWdUoXEHvntOhPDoMCsnShZF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959441, "uuid": "a048c3ab-fb09-41d5-a299-0700d1d9e33e", "value": 118300, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "fb9a4742-9f7f-4468-bf8a-2d7e78125878", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91ca7a30-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "5d5cfec8-46d3-4919-9e4f-0c6b253eb2b4", "comment": "Malware payload (Mirai)", "value": "38309992b01179070b5ae5acadfe3f10", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "c4089e8a-aab3-47bb-8790-ff45e0694bbd", "comment": "Malware payload (Mirai)", "value": "838bcee5cda38a12b60b05fc92e6b21dc69b7139aac82cc6a89ee0236c2eeb94", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "8c3d3da6-713e-4589-9b70-a4db9e8c2a58", "value": "T1C393090377094F07D06318F426BB5BF187A6BD6218F9B284751AFEC99271DF26142F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "2c05f851-f8d9-4e19-8912-cdea35a97e53", "value": "1536:GLM+0jysRh/6YwSKc4bS6WtPIw7zPVzo7q+gQVq7QlxnrsevVhgc:GOPRIYkTWIIPyVq74rDac", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959441, "uuid": "284de782-5423-47ad-a924-9dd32ba6ff84", "value": 88812, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "e4035b0c-2e78-4c06-b055-469e32d02eb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91ccaf04-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "56437c24-70a3-4ce0-a92b-0e9dbb0e0dbe", "comment": "Malware payload (Mirai)", "value": "433e0815bf1129c43e7b7c29ffbcf5b5", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "f2807659-116e-41a6-aa9b-d6848ddb1a3b", "comment": "Malware payload (Mirai)", "value": "c3d381d04149d2c5f369249694174fa9f7db098739f6eba4b6c04fc15ff0a176", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "f5c4cce5-dc60-47c7-8853-ee194f953d2f", "value": "T10393E842BD429F13C5C221FBFBAF059D3B166B79D6EB3202D921BF9023828D70D662", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "3f3ced05-6c5c-4141-a6a7-5c0549421d20", "value": "1536:QFV4F+8wMvh/zTjmCon3rqMGbQCiv6eQ5vkQevK4Dg8MgdxMUNEd1a:QFVSUujmCon3rql8PtckLvK4jMZ1a", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959441, "uuid": "8a7af9af-e64a-4a3a-99f7-2fa2e646b839", "value": 91532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "6c2360b4-d2be-4fc9-827e-caca130b91fb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "91ce48c1-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959441, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "e35fb727-8b64-430a-b86f-71d87afbc28c", "comment": "Malware payload (Mirai)", "value": "4cb046de2cc254902ea2109df7858d9c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "20bc374c-c41d-4578-b063-a81ca8a4bf37", "comment": "Malware payload (Mirai)", "value": "5bb83883e0b28002477d2e7107a7c280d40f4d4c46a88e4fa987630b4332e217", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "ba7670fd-9880-41ec-ad79-90a92c28f1ef", "value": "T14573F942BA47CAF3D41708F041F7B63F8E31FD3A493285A9EB65BDA2CA275C161163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "c00b73e4-2e18-438a-92ee-34b4cbf6f558", "value": "1536:t+ml11IujxuIX9GtkxBP4Hojcs/jjee/riWj8iamQuPbiXaGYjqrU9+X:t+ml16ujxVXPBP4HojcEd/3wiam/DiXJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959441, "uuid": "9b5f5276-5dd3-4511-9fde-4c0fa6b10a10", "value": 80360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959441, "uuid": "042969ab-d7a9-488c-af2e-ca0e872999f0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ade704ae-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959489, "uuid": "81b1772d-3be3-42ce-bf42-fba8cf676728", "comment": "Malware payload (Mirai)", "value": "289e4a99d7a22168085eceaba05ae3a4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959489, "uuid": "ce023645-1715-4341-ba4b-275fd368fed9", "comment": "Malware payload (Mirai)", "value": "ccf7ad6cc52d0f0622bbe8132f9dc2dd359273f555fc01e16a9a5a1b38e16da7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959489, "uuid": "afec944b-d11d-45f7-9ede-4fe2e8528334", "value": "T1B9730981BA43DEF3E81711F502B7DB365A32FD3A083AC5C6E364FCA16A515C1A5163", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959489, "uuid": "06bbe5d4-d5e5-41dd-8161-45323051e3b5", "value": "1536:RcK8MffyU5RL+r9RS3TlU0f/wEBOVkVgu3Urpbr5ag1416mEv6+8p:RcHCfyU5MuTlU0nw/Ygu3Spbr4q4HDp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959489, "uuid": "81029b4b-ec65-4d33-87f8-d3b5d5829bef", "value": 75560, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959489, "uuid": "e8a07ce0-4009-404b-9db6-76fe08bfb5b7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ade9aa5e-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959489, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959489, "uuid": "3f5d72ba-ffa0-456c-805e-aaa0f75c62d6", "comment": "Malware payload (Mirai)", "value": "ea5e78667922bbe457c520664352f63f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959489, "uuid": "3ae3b362-d4c2-4a12-b67c-22d473892291", "comment": "Malware payload (Mirai)", "value": "d49fddaa3a223aae52716aa3a1f88f1e53d470fd9591447270578382ff070f62", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959489, "uuid": "66208e0f-b5a8-47ab-9d3b-3b60b273cfb7", "value": "T1079329227E760F27C4C2A8F652F30B30B5B2AB5B28B8854A7D715DC96F246C032577", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959489, "uuid": "7cb8d5ea-1dfa-4b00-9613-edc98df3bbec", "value": "1536:5S8MSzlPyzhCJuWsZIJfQlSYJRDRtDogENWq52YMAdhctrr:5S0A2jWSodpxENlyjr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959489, "uuid": "58e0ea11-3a10-4bbb-897f-629c4cd4134e", "value": 95540, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959489, "uuid": "5ef85d91-bf23-4aa9-b2b1-4af9920b7b76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1e98b761-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "013b3b41-92aa-4cd6-a6db-139ef04ffe9c", "comment": "Malware payload (Mirai)", "value": "98a1307e711744a7c4a567fc91a7de8e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "28feb3ad-4b27-4635-a221-f6fdb2b51b81", "comment": "Malware payload (Mirai)", "value": "fb10cbce3b750290774de552141bdfee2b97f43c29b8a8e4be04fba0a2c0d5e7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "92a4ead1-13d2-4eb5-be06-cadc5a9d71b9", "value": "T1DFD308C7F900D9FAFC0AE7374853080AB230B7A549925A372257357FED7A1990477E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "ce8b75a6-acdf-45f4-8268-bd54bec462d7", "value": "3072:kSbul4MGHJvkrybLutTK/OwpiZdDoOPVO6V1jbiALNHFIax:0rybytG/Oyi42VOgLNBx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "592b6578-f874-471e-a126-9a8c3f838bf7", "value": 140064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "e23e951a-0d13-4731-a96d-2921dcf1bd97", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ea32b56-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ea0f4d9-b878-4bf9-a8de-6c2a3e7eb604", "comment": "Malware payload (Mirai)", "value": "1108e44314223ae8245932c239388a5a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "3f947fa6-48eb-469c-b9b0-bcda519d70e7", "comment": "Malware payload (Mirai)", "value": "332e784b02746b3dd6054d71e22112fc4cede6384d4ef44ca447ccc34d84674f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "88b36bfd-228c-471e-b3ad-aed1873266d9", "value": "T144C30956F8819B11D5D151BAFF0E124E77131B3CE2DE7312AD24AB307B8A8BB0E3A5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "ee671cd3-8825-4cf9-aed6-ffea45e4f760", "value": "3072:fWD7YhjFMX+maR8TcDeRqQV3tNQYciYTG1c:fWD76aX9aKTcRQVnoiYq1c", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "ae906d1b-3966-41ea-9cdd-e73275f4dc30", "value": 129244, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "db720906-daa3-4f96-a39e-33230f789b6e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ea3ade8-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "b6f34cea-4e63-4fc3-8573-3d26508b3937", "comment": "Malware payload (Mirai)", "value": "a67aa00dd30e1bc45c5d7eab8e5f57d6", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "26f08a54-0a99-4048-8e6f-3cd9d73b6540", "comment": "Malware payload (Mirai)", "value": "a7abb507c3fba818d313401ac9da83c6e7fc9a109f9dfc4e9c6b0d9d9703f6fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "4aaccf0c-4a08-47f2-b37f-38d1cc9b6065", "value": "T1B7930749FD406B10D8D635FAFF4F024973934B6CE3FA7201AA245B2523CAA6B0F765", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "faf7bc28-09b0-445a-a7c4-05c124253e8f", "value": "1536:wqnZK8D4zgUdtS0tFbvacgzafVAweBuqKlUI9HiWNRIbT2gZ1YLn:C8NUv5nTacgzafVAwe4BNRIbT2gXg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "c219a6b6-4059-4682-b277-e5982aaf747c", "value": 93252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "12f32324-d6d5-4034-8aea-267af3df54ce", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ea48679-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "052bc8ba-5597-494b-abd3-104eb65141e9", "comment": "Malware payload (Mirai)", "value": "3f15bcb05a8d4931c72cfe5d06eebbd4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "82688bad-2903-41a8-9dbc-5b288475b695", "comment": "Malware payload (Mirai)", "value": "3f064c305e1210001e661ebc6154f3f4f71a1de02a495a70bb266cdb50997377", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "4a58a350-c6ed-48df-885d-8a4e86810de4", "value": "T187B30945F8445B17C6C666B7FF8E438D7B2A1758E3EE720399256F30378B85A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "e4203cbd-0444-4692-81a1-bf8461c3de7a", "value": "1536:57jnPq8azP4V8YOTIBRvyNOzIuSIwYeFWd/lk68wywlQ3Ym3Tb/V1oEakCxr:1zPqF41OUBljSIxecUtCF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "6d715555-7a58-42cb-a2fa-47b1e744507e", "value": 113184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "9fea39c0-cb62-4ac6-8a01-50b1fec1d08a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eab5415-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "d0fd89e3-d5d0-4887-ab8b-a378ea11c1c6", "comment": "Malware payload (Mirai)", "value": "cfe905c5b37cd3fcf0c18ef94ed1ae3c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "0b115150-7edf-4c88-a23c-a9c7c5c80151", "comment": "Malware payload (Mirai)", "value": "cecaed0ffe519c83d77655e1c2f3409fa795fc97917fe9a258f2473b1f84788d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "83873dfd-9ebf-4f77-8c96-b5d4072b9384", "value": "T180C39DABB24F1051C82647F41BCB579C2E3325019E2B9AE77C6E373E1A369DE58063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "e21761a9-5f55-45ab-984e-a79648d11316", "value": "3072:gf0GQgHfg5nBR4YYSOxTKB6Aq7mgbgiCrheiiU48qe:gf0tJBR4NSALD7rnCrheiDqe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "b5e675d7-29ac-4022-a9f4-4f80f0a07601", "value": 124344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "872eb0a8-0a80-4fc7-800d-0d1daeaac6c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eab8eef-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "97d01931-0a3d-4349-b3e4-57d30aa925ce", "comment": "Malware payload (Mirai)", "value": "ba5b60475db6177cd7cefe90942cf20f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "9c602d0f-2069-4906-ae0a-21f20a620f1e", "comment": "Malware payload (Mirai)", "value": "36283e93299fb13567ff63d1ba6f1ae5a54a345473a6c30263ad45f61b2eb4b8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "b358c244-b432-498a-9b3d-3f3edaeee46b", "value": "T18F23F1B9D667F1BCD8B065B7038EA1D6A52B68014727270F03E132AEFD672686D417", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "5155e3e9-e391-4aad-97a1-67b2080b9578", "value": "768:xdGwNYm3GJyOvAZhON6YONKVLQi0jytVwLRZ+v84GZ2S0Jz1b8kpR9gkA4Eo:WwkgI6YONsLsjwVwimoLzxJ9gk5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "601e7fc9-0434-4be0-a2eb-a70abaf3a1ba", "value": 47784, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "ac75720c-e31f-4573-9c24-44e951d93cdb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eaef3c8-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "02367005-862d-4dc8-bc96-d5b7f2474fc3", "comment": "Malware payload (Mirai)", "value": "ce750fab8c32d73decd307845864d031", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "2af6f91e-3084-4f90-81e9-43edbb3abcfd", "comment": "Malware payload (Mirai)", "value": "72fc53134560249613c435b13044911019d1ea00b337f43fa539f21eb903b320", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "1fe0a39d-1d3e-49e1-9c71-d792c227a8f1", "value": "T174E3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "c0d9311e-9b62-4088-8300-c962a8d2dae5", "value": "3072:axjJw1Cc/0s6YAPwenUr48pzfR+JonBy:axlw1xAop0YfRB", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "81326062-4a65-47c9-87ff-c182c4739360", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "af40cec9-a98d-451c-bda8-e8bc84f836df", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eafe426-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "2dae2409-11e8-4408-bcb7-2803624f25d4", "comment": "Malware payload (Mirai)", "value": "999c20befe0b77c2429366b7c88f3f1d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "df911fa2-0975-4976-8be9-ec02e4f2befe", "comment": "Malware payload (Mirai)", "value": "5b6399acbc07e044107ef03c275b998306324f53f5442f4c243abdc8bcb27a07", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "d7cff3f8-4fae-4b1a-beb3-35e43c828cf8", "value": "T18BE3885A6E228FAEF67C873147F74A20976D23D623E1D684D2ACC1141F6038E545FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "ac16a07d-8fe6-43cb-beea-77db8cdcb8a8", "value": "1536:p+fTcKot8sp2MKypYz8ZOfGQ+v3eB/hub8mXRCTUGk4onuftL4VxZdbK:pYlybKpzEOfGQ+vEubTt4ouftL4FdO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "395e24cc-3869-4bce-9481-25e60e037534", "value": 156680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "1b603b3e-6321-4806-887a-f3e48d29daf3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb06556-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "867525c1-874f-4bfe-911e-50fc663b88e3", "comment": "Malware payload (Mirai)", "value": "242c5bd5126ac5b4d54ca6a97edf0678", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1c86fd9c-ab32-4a7f-b44b-cd4b3b68ccce", "comment": "Malware payload (Mirai)", "value": "ac12224d300baa85a2ccb8becb3f9cc01c6165ea77a0f41cc17e14f6d7ea4185", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "3f125af9-64bd-4996-a1ee-c650628f5a85", "value": "T1C751F4C445849E75ACB7EA52BAB6C21C7092A4C314DF7F9ADEC8B9E0858EE10F1407", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "2d1e20b4-d96f-448f-983c-5ffbe247e20c", "value": "48:ZpdXdgUpdgndgwdpdoXdd7pdZd2updydL1pdDdsgpd7dUopd2dfppdvdo8pd2dfG:ZzNgUzgdgwdzoNd7zj2uzIL1zhsgzJU/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "2d735cb3-c2c7-4d15-af62-fabe3d83cfc9", "value": 3066, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "e4662566-b6a9-4c1e-8ffb-2e6bb481dda7", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb09a65-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "f92bff63-9e2c-48a7-954d-7e56084ebcc2", "comment": "Malware payload (Mirai)", "value": "c5f3f9cde7856d0f24f7b0ca595cbd3a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "7a5ef216-ba4c-40bc-b7f6-3c87163b4efb", "comment": "Malware payload (Mirai)", "value": "c5fabb7238edaf7d1f9b477a492fc8bfa1bdb6137784dca152e6187ccc4b6cdb", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "f37aff0f-54c6-460e-9e20-c8ef338c1d02", "value": "T1D6A328A3CC762F58C628D5B4B0B18F796B93AA6081475FBE1567C27480C3D8DF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "71eeb540-459b-4921-933b-a21940dee985", "value": "1536:71ufPeqU2CVKCsNV7lsLPC9z+NzWuBx/3RhyXAn:wbU2RC4kPCtSzWu3/3L1n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "7282f826-e60a-4f57-a3f4-0e00f3ad6f0a", "value": 105056, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "5d835c3b-67e2-4f90-88b9-7a58df63da16", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb1dcbc-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "a987038d-15c0-4eb4-86dd-832827cd87b4", "comment": "Malware payload (Mirai)", "value": "e4b603e0fa4883451f568ef095002d05", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "a89b48c4-3dc5-4ea5-89c2-4cf07f7dfeb7", "comment": "Malware payload (Mirai)", "value": "ab8e7ec76f4021ec7f0a2586d3a2d5bf27d1e78e531c07aa6c71afcb6b59a245", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "fba26dae-2342-43bd-9d6e-36e7077b5695", "value": "T19AC32A05B30C0D47E1633EF43B3B27E193DFDA8121E4E640655FAA8A91B2D32558AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "e1e60177-6419-47f8-949b-355d4adce0cf", "value": "1536:68B72AZ4ex10JrZqQ7UrZb6wI0vAnjiLVRuzae8Dhq6N2te5f3dFJ:6eB4exMF7oZKJnCNYajJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "6810fc7d-c9c1-4278-83b7-dcc4c05a3a23", "value": 121508, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "d1d2d3bc-bbd0-4afa-a8b8-80cbcfaf94a5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1eb54420-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959678, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "6b5c2534-bf84-453f-8573-de56708e1d0c", "comment": "Malware payload (Mirai)", "value": "676346035726ad2d301f0b6dc96ce0ba", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "ecf47da3-9a52-4f27-b4df-d727e4c4f73e", "comment": "Malware payload (Mirai)", "value": "312c4ba029a605fae997860667eea6b46fdfacccd00c90b40f4b6dd392e6d304", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "145ff5a1-e425-4397-9a28-46e2e8b9d8c2", "value": "T18B32C517A7BBAE1BC4D037770193072162E95F916024472FBD0D1C8E6E9A3412D3EB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "63b22089-4cdd-48c2-8d27-c4fdf12a578a", "value": "192:xvrOR1CQOsz1NxfAz+OH9iG0GhWaDpU/O7Q89AGSybDqeif:xvrbCzfap2GwIU/kwGSYUf", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959678, "uuid": "800eda46-b1e6-4def-8929-18b7ba2df679", "value": 11024, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959678, "uuid": "09724163-4aee-43d2-a06c-434703af21c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "435ab8b5-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959739, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959739, "uuid": "303c1571-6d34-4a73-aeaf-de6d62e3f071", "comment": "Malware payload (Mirai)", "value": "fc00f4cc694aa606563c17c4aea10c63", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959739, "uuid": "3f0ae891-9635-4a1f-9c0e-2a95b2d0d684", "comment": "Malware payload (Mirai)", "value": "d24964dbf3bdd5ad822bcd66f4207275c238cb940eff4628dad7c6559648bd22", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959739, "uuid": "7b5e7e77-be29-40ea-98fa-f02698e5840b", "value": "T180333C4DF783E0F0DD4B0531115BF77E96349E025124DE7EEB98BE66AE32A02711B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959739, "uuid": "d8a5d5d2-9723-4442-ba45-58305802e154", "value": "768:twzbCo1eCZWUJ2SSpRflrFWwqTlFNB5azjYvzNeVMU2331ANA0B7RhuqDV98TN+s:twdt3SpOzwLMU431ANA0BLBCXr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959739, "uuid": "b6bd0b17-32ae-4551-aa36-5771f51aa523", "value": 50476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959739, "uuid": "05ee3b90-df7f-46af-a94e-9c9a9fb76ac7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d18a733e-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "e06e925b-572e-4787-b9df-aae7f0bf08f0", "comment": "Malware payload (Mirai)", "value": "3d739371a3ab3ff1e506e9bd51d2e2fa", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "f2d085cb-cabc-4461-aff1-daba0320a013", "comment": "Malware payload (Mirai)", "value": "66f0376af858ea10597b819d8fdd93f14ddb9b7f5acb0b7070f4ad9e2fbc4e12", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "339c3a65-757d-4963-9345-6cac9fcdfbdc", "value": "T189D2CF3C690940DED57B42FCE7E10B083E911DAD3C50FD0A6450AAD6E9966F0B29F9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "c6b9e054-95e0-442d-86e1-00d327c1edae", "value": "768:1oV+dOnq6bj9EGyAhsI5izUBEZBWFPewWjwXduo0iEvJgGlzDpbuR1J6:eV+dKd/ZhsIOUBqBWww8wZ0iEtVJuY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959978, "uuid": "071b4096-71d7-4e8d-92ae-2c2c2e471303", "value": 29500, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "b85c7612-75c4-467a-be0c-41701bde215a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d18d905d-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "709314d7-f733-4161-b0c3-a5ca9bf5f703", "comment": "Malware payload (Mirai)", "value": "02605b8f7f7046692c86b405561fd377", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "1b2cf94f-4c78-404b-b85c-2a8593281018", "comment": "Malware payload (Mirai)", "value": "5cca438629fa19de537ad0cfa6866450f0ff7f7977ac13a9fab79b9a9fb0719a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "405f472f-a4ee-4ca8-8e47-3fd9d95b7117", "value": "T131D2E16EA76E9F1BC0478A7C6027C65F452FF8220B0FBA5F792C28460DD3484A47C5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "9563f6fe-8425-4479-9455-f4c42d27d88a", "value": "768:+hSe8JC7OiiRK+eyeCYspR+WxmHqBZ+doGO+kVs5:gOxK+ReJgR+YmccdWRK5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959978, "uuid": "4657fe6c-1781-4930-ab83-620c7c73a9d9", "value": 29228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "31252689-8264-44bc-8274-1a2cef009eaf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1922af8-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "24f3ece6-6b48-4b6b-8b50-45f4e12ec0b5", "comment": "Malware payload (Mirai)", "value": "4865639a954512d78abf67cc825b1707", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "c01d3fad-88d6-4cd2-aae9-bda8100aa31b", "comment": "Malware payload (Mirai)", "value": "ef8bca1b5fe5923f906168b05d03f85437ccaa2cf2fcd3b5458b8e225317bc3d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "613e9a81-ea1c-404a-b05b-a111dbdc79f7", "value": "T124E2E1069B14FD70C6F20FB3CF284389903B53F8E9DA15669B146B846ACB40466BC7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "2f2a1f41-c403-419f-922f-4c6d34248ab0", "value": "768:umeDU4l8CCuKMU2RKVooPcr5nHbgdJiacBYt0w9q3UELjf:umIrWM3Xga5H8dDQG05LT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959978, "uuid": "fd8a146a-b893-49c0-a774-4b432daf4a1d", "value": 32236, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "f856384a-35e6-4d1f-9ed5-e6a651cd8b09", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d1a08f5a-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774959978, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "d2f7f2e4-d0a2-45b4-9afc-695ae21789f0", "comment": "Malware payload (Mirai)", "value": "dbd15fa2c771215643412ab00afb3072", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "70fea23a-bb0c-4928-9884-2146a1f54cfa", "comment": "Malware payload (Mirai)", "value": "d1ac51a061ac1939fe10cbca294221d4842a2541b9656c5ef933744b16e8bfff", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "4788d753-3934-4e27-a59d-e67291eabefd", "value": "T1B633F1BAD5C3B833D670A438F50DD4D8CA4E1EFAE57F40B252849A9C4ECA60175AD2", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "033fdff4-9b15-4b81-8d59-d7073e0b7390", "value": "768:ywsVxywLC+dmEEGJZacVEii+sjr3aVzVRjZQX6SFM9q3UELudwl8KL0hoI+TZJ+I:yw5WuGHacW1+2sVdZQjL8wKeo+eI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774959978, "uuid": "82161273-17a3-4ad4-bdc6-338b4d0e72c3", "value": 51988, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959978, "uuid": "6aa77619-c7dc-43df-bc28-e1b3b8526674", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0f6ef9b-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774960031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960031, "uuid": "611a6b73-be7e-4041-ab29-bf9806a25cef", "comment": "Malware payload (Mirai)", "value": "f37a37e4b27a75cb377490f5dd2db599", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960031, "uuid": "51224d07-7574-4709-abf7-c3b4b6ab6318", "comment": "Malware payload (Mirai)", "value": "6ee95d5ec5b2abb64202fe0f6fee953947e11764bc2f830ce139633d5755c63f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960031, "uuid": "c8b7a674-e118-4879-b569-91ccaea8f486", "value": "T116C2E130D1D6ED2186E02075B33AC7D121A767F972D9B72A2B8147B8B38E6645190A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960031, "uuid": "3e5be05e-ec6b-4202-b52b-8b9852c6b842", "value": "768:kUvDr4vtMf1XofdA5EfZ+Yz1K4FaIVs3UozF:kUvDrYSYlAHCaFzF", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774960031, "uuid": "a691efbd-ad1f-4202-b2d8-0d60401952a7", "value": 27272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960031, "uuid": "f77aa23e-e25b-453d-a602-f17f40713cf9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0f78344-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774960031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960031, "uuid": "eff3370b-c3c3-4516-87a9-2426bb563dfa", "comment": "Malware payload (Mirai)", "value": "2727e396285048151fee96daea38f21b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960031, "uuid": "72aabacc-a1c2-43e0-a51b-a140f276336a", "comment": "Malware payload (Mirai)", "value": "f3798fe1f43bb41671225c43c3569333584b9fb2f83eb75cb37a1bfb190a7cd0", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960031, "uuid": "6860afd0-9bb2-46b7-bc74-474631d3b264", "value": "T15BD2D0ACE2585995CCFD9C39269E6FF32D904745B3D66FAC630148CAEB38959F10C9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960031, "uuid": "3536a3a3-dc33-4760-8863-9429c978f1e6", "value": "768:IJpP5brCsdTo93dUxCq+/K2DWoWU9+ZgWI:IJpP1JWddm+/XkE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774960031, "uuid": "b5cf3d17-788d-4099-8cd2-c58b81641f5e", "value": 30680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960031, "uuid": "a429945b-f4ef-4ada-b018-da139f38aad3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f0f7ccf4-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774960031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960031, "uuid": "159533fd-f22e-4cc0-a25c-660a52a3a07d", "comment": "Malware payload (Mirai)", "value": "015f4aae60b7da7f88038ba158f2836f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960031, "uuid": "0a13ec37-eaae-4e60-baa4-7f06388cd318", "comment": "Malware payload (Mirai)", "value": "85e754197e6b0f1dc42a3254032f082c978890bd7d39e30aa6623c330dc5d4d9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960031, "uuid": "ed33447c-c3f9-4cc2-b502-d2b7590f650a", "value": "T183C2D07473CE25D5C1F589B5AFAC48CA33D337BC54A871A60A508F9DAAC4C8672742", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960031, "uuid": "5a1c7c8b-4b6e-4f52-b337-3fee3520d524", "value": "384:ELX2+fjlHzVMZk7sb+0bhNBAP7A9ZRpmYalyArdqaJA5wr8hhymdGUop5hguJ:ozpwoSJhy7A9ZPmRd5M6ws3UozyuJ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774960031, "uuid": "e3318d69-2ce3-401e-8d4a-fcf9f7ad9a46", "value": 27252, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960031, "uuid": "e0ab0ad0-6b21-41ba-9368-e512a69b5e9c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6579c81a-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774960226, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960226, "uuid": "a6de9dcf-71b4-4714-bc14-dc75fef39352", "comment": "Malware payload (Mirai)", "value": "9e9ab1eeb45d5066288a4d5dff39d781", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960226, "uuid": "2bdba5e1-0da5-4e08-81af-18cf69e2643b", "comment": "Malware payload (Mirai)", "value": "24db1fd9ae6ffce9e1b415e95b75c61000a37b1fd24feebc51a0e14b126a7093", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960226, "uuid": "86ec8e6b-8b9d-40b3-9af6-373ff74a27ec", "value": "T1A9B3F946A9429B12D5C631FAFBAF414933536FB8D3FA7101D9205F6023CA9DB0EB76", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960226, "uuid": "50ca58de-b5e9-42b6-ad0d-3faa55b0d246", "value": "3072:LSwrlqVLrwO1nnfG1vdiL1Pk8tMazF7h1eLJezWfV3I0c+bUBf:LSwrcttne1vdiL1c6MazF7h18ezW+0Vm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774960226, "uuid": "396d6edb-45cf-402b-b8df-33c34160a32a", "value": 113440, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960226, "uuid": "da3f729e-f21d-4a3d-a05d-24f2f8644a4f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e9af600e-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1774960448, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960448, "uuid": "e3220cbd-988d-401e-80b5-17fc6aa1b996", "comment": "Malware payload (Gafgyt)", "value": "d96f6fd1263a21abdd25f5d923eb2bec", "object_relation": "md5", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960448, "uuid": "cdf037bb-33f7-4eda-ac9d-854af43dd50f", "comment": "Malware payload (Gafgyt)", "value": "ef6bfcb7f6a3d85cff4227cb81cf290905fa608d8349518f1868679ed0ccbe48", "object_relation": "sha256", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960448, "uuid": "a6c450ea-52a3-4c42-86b7-3b53e70b753a", "value": "T1F1631B07BA428BAFC14FC1F407F76A399922BDBE0A36F1E5E3A4FD861901CD05A1D6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960448, "uuid": "e9958fa8-3b3b-4cca-abdc-1089d3a5a947", "value": "1536:GnHkHRxHBFPSWGz1GYlGy5TGpWE7wH9OXEL9qo:mHkHvBFVGz1UytJE7wwXEco", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774960448, "uuid": "409ace44-4d9d-46e3-bde1-4125e9e4f16e", "value": 69624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960448, "uuid": "b582bfcf-83d7-4620-853d-44ba629960db", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a91b8982-2d02-11f1-ba1a-82aee05be84a", "comment": "Malware payload (AdaptixC2)", "timestamp": 1774962487, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962487, "uuid": "119ead5d-0c79-4bb6-93ac-767039987705", "comment": "Malware payload (AdaptixC2)", "value": "5a4a549a504360bc21c60079fa2a2f60", "object_relation": "md5", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962487, "uuid": "81e2a95c-920f-4d75-9594-05ece7f6799e", "comment": "Malware payload (AdaptixC2)", "value": "7192f8dc0173afc11ee73bfa161560c712a3b26aff10c82a9c1ec3719690fd88", "object_relation": "sha256", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962487, "uuid": "c0675709-bc25-4f97-9eeb-415ab427ecee", "value": "T1AB350223F2502D7EFBC2A53FD252AB9E093BCFFA9442C7767A14E5A9A414C054D213", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962487, "uuid": "a3f87adf-ed30-452b-8476-a22897cb62f2", "value": "a9c887a4f18a3fede2cc29ceea138ed3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962487, "uuid": "66ed334a-27e5-4be7-a0a0-8071baebe2c6", "value": "24576:OkrLKH6AmZsd7EJ5dA/uFjF5kOjkPd/mGi:ZxpZsiJ5dCq6jPpmG", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774962487, "uuid": "81b4ebab-f9c1-4954-9576-dccd42b05275", "value": 1162752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962487, "uuid": "5f9c5c90-9134-4fa3-9ad7-90044831175c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ed6d93d-2d03-11f1-ba1a-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774962846, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962846, "uuid": "9e700ad1-f79c-4c1b-ad82-a97189844f04", "comment": "Malware payload (ACRStealer)", "value": "09aa96b1f658a99726cb5b6308a259fa", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962846, "uuid": "2a63c2bb-1a59-43f2-a1b0-cf31116065c1", "comment": "Malware payload (ACRStealer)", "value": "2bfd69fbbdb76955490233d563a559c70f172c10d60fced20461d6bdc88cac80", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962846, "uuid": "c0f43901-ddec-455d-91d4-e8a92969d890", "value": "T1B676E64B9C6B0560C87891388467411B37B83C995F248BCB36A6B7752FB3BE42E763", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962846, "uuid": "2fab1d33-d0ba-4e08-b60d-5ff39ecf3d5e", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962846, "uuid": "fc5bfca0-952a-48ca-8c47-c4f5a534c479", "value": "49152:HA6K+fWADZDxvuytlu5ymIvsSg4JaPaOHo8Iuuz4s4wzrrQTHjBMQclO/560pc:HA2RtqqvsSg4JaPaOHo8Iuuz4izoJ9n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774962846, "uuid": "15024df0-3a37-40fc-9adb-bd4508baca18", "value": 7197184, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962846, "uuid": "e1ad7220-bd15-4ebf-b8d4-df76e0f4cf60", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7ff97e71-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774963707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963707, "uuid": "dd58e253-498f-4417-afe7-eefbb3b359a1", "comment": "Malware payload (Mirai)", "value": "11b5bca019537cf6486ee5827d383935", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963707, "uuid": "eabeea67-ffa1-4c8e-b025-86d0a43b8c51", "comment": "Malware payload (Mirai)", "value": "128396e00e8d7f3b3ae0ea8764c8d05448861a825e872d729013768537c0fdde", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963707, "uuid": "10d5b512-d9e1-4e05-9f4f-9a444168ee45", "value": "T1BAB30945FC505B17C6C652BBFB4E428D7B2A1768D3FE720399256F30378B96A0E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963707, "uuid": "c76136d1-42c7-4985-bf65-217adc5c9aa0", "value": "1536:TUK9yqnU8vGRz4VA4j6T9y28Ty6O5FtZpqQcZlCtwywXvqcVuafhPeA45ZvI:AixnUHz4Z+5ypkn3E8I", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774963707, "uuid": "46a51c31-ae5a-4ec5-8e64-03d352813c88", "value": 117280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963707, "uuid": "6028121c-574f-4967-9f04-9aaa1c96ccbb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8000f53a-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774963707, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963707, "uuid": "133ebe00-29da-4852-a887-64b081e807bb", "comment": "Malware payload (Mirai)", "value": "44a94732a1980363c7c06aff7167af38", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963707, "uuid": "3abd0968-f057-4ce3-8215-0546701a82ed", "comment": "Malware payload (Mirai)", "value": "f20991717b62d88a44b917df63021187bdee72b4c92a7773eb66531f86c3a43f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963707, "uuid": "099d5c24-e84c-45bd-a594-6853463e8293", "value": "T110F33969BA0F6C41F2C2D3F9DA8C87E13E1735E3C6778DA1790252EDDBA39D949805", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963707, "uuid": "ad093b4e-637c-43c0-8334-f1e300c416c3", "value": "1536:3dMiHrrc/qDHavM5Dtrg89RPA4b1X75rgmnX7Dy+IfMpkEn5p5M/LW:/7vDtrnPTR71gmX7Dy7fMpkxq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774963707, "uuid": "1a0cf95c-23cd-4f01-8b75-1dd0ce6b81da", "value": 157544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963707, "uuid": "c53ccacb-0971-40ae-a4cf-a6dbe1ae5e80", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9c5f38f8-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774963754, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963754, "uuid": "33529853-2267-4426-a8af-068fd6d443f7", "comment": "Malware payload (Mirai)", "value": "e080c88f93ccb57569a4d6a3dd8fbd97", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963754, "uuid": "27adde77-4948-4c3c-9d10-5b298c29eefa", "comment": "Malware payload (Mirai)", "value": "e946662996cb04d86082d20460698495fc28cf36f9a876bb70185d986462d360", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963754, "uuid": "38543f3d-bbd3-4cba-8fe7-c41d4e2c0a5d", "value": "T1A914C70A3A228FEFF56D877147F34A30976976D627E29684E26CD5101F103CD681FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963754, "uuid": "dbb786c7-e456-4b46-9146-3ee36f4e54c8", "value": "6144:456eQCbeoufx4Fdf2dp06GtCqjYW8nY1j20WI:Dely4Fdfap06GtCqjYW8nY1j20WI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774963754, "uuid": "caf01c8c-47e9-4252-b44b-2786f4de74ef", "value": 202077, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963754, "uuid": "69a67633-dbdc-48f8-9724-2dd1431dbaba", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "60d0a2c5-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774966661, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966661, "uuid": "d9428a0d-8e76-47f7-a36c-79f5ef3ca207", "comment": "Malware payload", "value": "b951d98f0c20b36ead18f615b1578ea9", "object_relation": "md5", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966661, "uuid": "62096caa-409e-433d-a13e-94a6fd335e1b", "comment": "Malware payload", "value": "6dfbbcc02db0e61add00bd44e21e8f2d81912caa90bbb6520202bd9af1c999e3", "object_relation": "sha256", "Tag": [ { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "NanoCore", "colour": "#d0f361", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966661, "uuid": "5afd85ca-2df1-4436-9f58-60ba0b7673f1", "value": "T12BA5F10CE1467CBBC977B2BD50A36246D755E19111D86E9268C259B82B0F62C3F323", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966661, "uuid": "3a80f9e9-01cc-467e-994c-ea203bc73540", "value": "49152:/2SlIwGw/meQbzjJE7JTZLPPorO4+ZfBQureQs:esA9E7J1aJmtreQs", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774966661, "uuid": "3be26757-6e08-4f05-829d-2cce908f2c7d", "value": 2147324, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966661, "uuid": "c864484a-4216-45ba-81ba-5ee91c83fc80", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3063398f-c8e4-11ef-afe5-82aee05be84a", "comment": "Malware payload (TinyNuke)", "timestamp": 1774966867, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966867, "uuid": "d0903496-8e4c-4e88-877a-705273bce003", "comment": "Malware payload (TinyNuke)", "value": "b7e00e7be81fefb7c57f2e5f9ba53310", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966867, "uuid": "d94c6919-4835-4a17-ab29-cd3640c7eb0f", "comment": "Malware payload (TinyNuke)", "value": "4d2af9283f59dd98dc1852a5213d5092dd832c3e797c7ee57908fa9ff122983d", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "stealer", "colour": "#55c590", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966867, "uuid": "2d54b28c-828c-4830-821f-344a84011509", "value": "T168B37D01F1D0C8B1D175053A1CA4AAF18E7DFDB08E599F9B6B8809B60F7C1D29634E", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966867, "uuid": "45a932ed-13bb-456f-86aa-cdd182d474c9", "value": "efe9c653199957170a92ef694ca6f2f1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966867, "uuid": "3927b769-172e-47fe-9d5b-a1b0761b076c", "value": "3072:rtwm5FikJSWy/Z5H3/nWSWyCsu2Z8mx6tWyEJQJW8chJeE:rWmPiKSBnVu2Z8zXt4JeE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774966867, "uuid": "539ae29e-549d-4ac8-afb4-09fb9a6d1795", "value": 115200, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966867, "uuid": "2cdd90db-2b37-4727-b13a-4d7c3557b8ac", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dcf855ac-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1774966869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966869, "uuid": "9334b69f-8203-4450-9ae8-e9f2014656da", "comment": "Malware payload (Amadey)", "value": "52003f6626751c2c2a6b8fec0beedd83", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966869, "uuid": "79366560-b2c4-4bec-87aa-7f49c63d8b21", "comment": "Malware payload (Amadey)", "value": "88313d63ba997c3cc9279cb5b1f8450517d08a06c8a074c42e733a8468b42c31", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966869, "uuid": "9c4f04c6-fce4-4977-8551-f31912b87637", "value": "T100359D16B941C071D49401706269BFF2593CAA35672145DBFBD02EB2AD305F3BE3AB", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966869, "uuid": "ec148cfe-f027-4356-b99e-d2a1bc867d49", "value": "a252cd53ebc44617e8418747345d10c1", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966869, "uuid": "c5ae5b10-3717-4579-b96f-2fd15745f77a", "value": "24576:zLCrua2InCFeiwzFJEUoBmx4I1bzNEhzcJZ4J:z+ruaRnC0iwzFgI4oJZ4J", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774966869, "uuid": "cc9cd629-a96e-4ff3-81d9-516eb435c606", "value": 1102336, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966869, "uuid": "d2506f65-5981-4234-a884-78b4afd3609f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd08e3a2-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware payload (Amadey)", "timestamp": 1774966869, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966869, "uuid": "3c71f8ca-5e75-4218-b1a8-05ae17657d48", "comment": "Malware payload (Amadey)", "value": "07efd816a182a5f8e3533b5479126b67", "object_relation": "md5", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966869, "uuid": "3c099100-fc08-4668-a19a-8dad93535b7a", "comment": "Malware payload (Amadey)", "value": "a410c89db9140ed9dff55bff00b0338fbdffcc709490782c7b28e8a10c11eb3b", "object_relation": "sha256", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966869, "uuid": "ce500c4d-44ab-451d-8681-750e8a9d89c8", "value": "T199557C0BA26141BCD4BBE1789A175A47F775704603709AEB07E446A63F13FE1AEBE3", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966869, "uuid": "95a2ea08-7511-4d44-ac06-d8ef1549d93f", "value": "3f175edea93fa7a76a78004d12de2235", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966869, "uuid": "6a65bcfd-c2c0-44d2-b17e-9ef37b9bf23b", "value": "24576:DrR0NaOy0mK9yCksn6JCc2YkxfUyamitsDw+mLRVhOnW:DkHmiyCkhh2Bamituw+U7/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774966869, "uuid": "33acf57a-7bde-42b6-b6d4-4809672e9e17", "value": 1282048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966869, "uuid": "716dc2d4-b91d-47e8-ab79-3cfbfcd2b1b9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "103f7886-2d0d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774966955, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966955, "uuid": "9b04a4d7-d447-474d-a5c0-1ac345621713", "comment": "Malware payload", "value": "8f7b45eb9afe415591c0ca83e8d807bd", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966955, "uuid": "8215ce16-99c2-4276-a794-f118f2c59623", "comment": "Malware payload", "value": "0989925ce46c57e9abc8c10d61841697b528de54233515f14690e047c5e68348", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966955, "uuid": "62bd1810-b69e-4edf-914c-3013410b92a5", "value": "T17904F0A336104B7B6D75C8DB6F1A5EE940BEBF0003BC61F2DA4A6891D4B4743C2E5A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966955, "uuid": "b2bccfcd-f7b9-4703-ad5c-1cbd4ec74aa5", "value": "3072:1PvAl1d5Inra0BEmnxWs60hKdxEARreP1VEPgO80xsR:OSHEmVExQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774966955, "uuid": "11bb4d33-f253-4baa-ac05-3c513101cfd6", "value": 173815, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966955, "uuid": "02f9677f-6bdb-4e7c-a2a1-360cb91400e0", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "de0ed2f3-2d0d-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774967300, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774967300, "uuid": "ce582a79-d11b-470d-9864-c054e8b6bddb", "comment": "Malware payload (Mirai)", "value": "be40a1735a39cd815d3153b52a5d104c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774967300, "uuid": "d7a60d5e-6991-4eee-8dd7-f3414ffbd49e", "comment": "Malware payload (Mirai)", "value": "4e8accc6e35ac3ca33548b488fafc3297b57ab59f7fb51bc71883f5b9cb51da0", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774967300, "uuid": "7fd64261-e0b8-45c6-a6ab-29bb89666e8c", "value": "T13FD34B46FA414F13C0D6177ABAAF42453332A7A493DB730699285FB43F8279F4E63A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774967300, "uuid": "2fbb341b-231c-49c4-beaa-1f0426fc344e", "value": "3072:S6Ao5RiKR0Mj3d9VkuhReXS2CYWCLkA2/u/M/9QcEI:S6Ao5RiKR0E/BhReXS2fWHA2/mM/9pEI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774967300, "uuid": "c6353b83-a26d-4de7-9577-914281265462", "value": 139840, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774967300, "uuid": "601cbab0-a9e6-4541-bc16-2711cb90444b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e4c32d1-2d0e-11f1-bc00-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774968252, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774968252, "uuid": "24c79266-d3fa-4017-ad9d-affdd7e0fef5", "comment": "Malware payload (ACRStealer)", "value": "609b1ba6e1b678a8155baaa580c9ac16", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774968252, "uuid": "da411a39-1f8f-4695-a5d2-f4b6698f4b76", "comment": "Malware payload (ACRStealer)", "value": "d1fffe10c5413fd0c5d3e9026b8edff1a6864ca5b9efde1bc47bd2bb16e6a16a", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968252, "uuid": "14088468-88c5-4884-b465-307d41ccfd7f", "value": "T12F76D61ADD2D4550C0788074A97B8122F7793C846B3417CB2A96F3683FA37EB6A793", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968252, "uuid": "ddd26c25-bb2d-4088-827b-51984fd7947a", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968252, "uuid": "14ecd9cb-5dc2-4d40-9034-9b1a85812202", "value": "49152:7F+uvSXSvm9bwIlmmZ5g7mcDbLRiBahLjFZTd8lGQclarDZpcU:7F5OyV3ZdiPx", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774968252, "uuid": "0320feff-6913-482d-8728-ca6dbd25824b", "value": 7324160, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968252, "uuid": "544e2e6f-07d9-4834-b35e-975d66648531", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "71cd8e9d-2d12-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774969266, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969266, "uuid": "e5da4e4d-5861-413a-8066-3901a6f8d48d", "comment": "Malware payload", "value": "68b249c8526a94d24e4ac9e521994c40", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969266, "uuid": "20179795-8906-4f97-8da7-78d89f11b3fb", "comment": "Malware payload", "value": "515b45795d8a54070396954b5cb3ccc9a253bdfaa428c74899b305a738c05896", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969266, "uuid": "d8742363-7c7d-4381-b23b-b6761ca8c939", "value": "T11434F1D3788B0DA517038551400890BA7E9850FCEBDED6A723BABE245F5E5F1B7CCA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969266, "uuid": "2bc20e66-ba44-4c84-965d-2f48500d078e", "value": "6144:Cfp5x6WdN1Jb6zBppVvWn4+4arJs7IjkaPWMiT5ZIblOhmT0:CZRP6lppVvW278oDIJiI0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774969266, "uuid": "735e1cd0-d830-4bc8-b5e2-596a022909af", "value": 247883, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969266, "uuid": "07419193-aecd-48f9-9a55-ada995b11838", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fecbc46-2d13-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774969585, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969585, "uuid": "1b5f3466-9ea4-416d-afcb-d391cd2c8a4f", "comment": "Malware payload", "value": "61310734eff646c1cddcd03b7c5bd8a8", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969585, "uuid": "844a5030-2a68-4d35-b361-4a7f8386a8cb", "comment": "Malware payload", "value": "7a704d94b71b9c001097f53eb7c2b7182a3d22bbaeafa45c92ab3a4b9422e578", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969585, "uuid": "4dca8178-43fe-46ed-b05b-776aac4b900f", "value": "T1A293093178AF052A166F835E80427B1CEBA982DBC601DBE8F4FD51195FF4D8932676", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969585, "uuid": "f1f20694-f9e3-4d72-8698-20450be690b1", "value": "1536:0Byp1tF/uwMmAIa14oXSuI7epeV7tb73WdxCrCitkb5fv2v05xB6rLKBCsMvKGC/:088I00GitkbFv2v05xB6ryCsMvZCqy7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774969585, "uuid": "5d23e8a4-58aa-47ce-8042-e242ab442669", "value": 94661, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969585, "uuid": "0b904552-7105-4036-ac6b-54135be6fe89", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "19458516-2d14-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774969977, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969977, "uuid": "b2c9d123-1fb7-4313-bc85-a485cf028761", "comment": "Malware payload", "value": "67bf3b16b3bcd02ecbbd4cd6437799d5", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969977, "uuid": "4bc3d2c0-d478-4824-bfc5-0269ffde2ef6", "comment": "Malware payload", "value": "8e70ca00ca7dc873992869e5fdc5432b26cf4dbcc0a394e8e235556b73f4c2f0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969977, "uuid": "5621d9d2-0e88-47c2-8440-7799d6fd7ff2", "value": "T1C893E871348DA839224F818FC253370C70DEDED5E212A5E5F2FA623895F9D903AB36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969977, "uuid": "990040d2-84b1-4cc3-af69-d47024489cc6", "value": "1536:kap9huEEwH8Dw0YMqpYJKNoE+pTYeGf8BqLv3Tli5oRGpNuqYPPXUIH8LutVWw:DduEEwH800g+pHBqv3Tli5oRGpNuqYPj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774969977, "uuid": "6a50daef-cc4c-4061-87f2-61fa7990a80f", "value": 89608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969977, "uuid": "9f83b6f1-8843-49d1-9a07-236e7c6823ff", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3532e85-2d14-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774970235, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970235, "uuid": "f71c0d3d-da88-4d03-a0c0-45109f2ae020", "comment": "Malware payload", "value": "fcdfed38ff828fe6a0090b58234f52e4", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970235, "uuid": "2913931f-7e43-4b03-aed1-b699f76e08a0", "comment": "Malware payload", "value": "802e75147868ff2e023bcd1ca891da4f5a5c07181a4432c19cdaa35c8966ffb3", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774970235, "uuid": "b45e8a9c-cae4-46ac-bc76-d03f31ced4b9", "value": "T13082C01D12B1EF54F1F18692427AA35F49FA3B39840660C2298753A852CC4A6D2FEA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774970235, "uuid": "834b1850-dcb8-4a77-b857-654f5bfec9c5", "value": "384:VrpWcgOIb/GJhdv4tJyy5Nq6sGVWEaDzaach9vHG7eI:1gAIb/4hR4Y7k90zaachNm7eI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774970235, "uuid": "2b719619-51d8-46b3-93ed-f3ab59ca481c", "value": 18688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774970235, "uuid": "a3eddb81-a568-4d9b-a108-a759e39ad661", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c31929e-2d18-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774971700, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971700, "uuid": "8af28b6c-dbbf-412c-8343-a3e59f8a68d2", "comment": "Malware payload (Mirai)", "value": "cc1df0c4ae0b3f1af0362cee2d421bbf", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971700, "uuid": "95e87312-377f-4843-9865-7a4b6d06b5d6", "comment": "Malware payload (Mirai)", "value": "6f71f386d698041999d5d5435b6f6e333755680acc320a1ce5005d4cc11cc08d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774971700, "uuid": "ba417db4-6f7c-43cd-a936-ffe773a82f6c", "value": "T1DD14B81A6E228F7EF268873447B74A259B6D23D627E1D644E1ACC1105F2039E641FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774971700, "uuid": "8ddf598b-520c-41d4-a8a6-eba78c5b696e", "value": "3072:fl+quvEVTAcFvV7kVnEtRA6T+Ig1oJGvwn:QqfVTV7gD6TS1o4vwn", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774971700, "uuid": "e12e2315-3db7-4798-8c39-391114e4aaa5", "value": 190480, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774971700, "uuid": "9e32d4ad-f383-4aed-9850-8b151d9f7684", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "30cb2ed2-2d1a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774972593, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972593, "uuid": "d3c4c0de-4baf-4558-972c-55fa01d8b72f", "comment": "Malware payload", "value": "a2493317d263f7e96a651414cdabf1b2", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972593, "uuid": "d97c9702-a1bb-4b2f-b157-b8c8bb4d8d55", "comment": "Malware payload", "value": "1a008b2123d4b6bfaffd324cf9df74eee3ce7558d92a7b8ec1f84c325ab6ca03", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774972593, "uuid": "fa83ba9e-9114-45e0-b6ae-5777051b42cc", "value": "T1B68309327488582A210B428FD267336C70AFDCE2D611E5B6F6F622344BA5EE135B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774972593, "uuid": "36c42049-c230-4c35-8679-97da8e240894", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnMWaFVN/:XEKltp9txAX/yr2pbMWUVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774972593, "uuid": "445da506-978c-4e88-900d-489f7286630d", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774972593, "uuid": "78704bdd-dfb0-4bb6-9cfc-22d3078e715a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f9bc91e9-2d22-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774976366, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976366, "uuid": "c8d4eb8a-1ba9-4565-baa0-1d9ca14114c0", "comment": "Malware payload (Mirai)", "value": "f6cb5c0a8a1bdc80761c24bf5b63722b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976366, "uuid": "98ca7704-fb55-4f39-9cd3-a8a157113fa8", "comment": "Malware payload (Mirai)", "value": "c9f1898be5497409f06688f413d277d3391ee1f4406b16a611bdcce761c04930", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976366, "uuid": "9a1be086-a324-4aeb-90e1-b036bd0d29fe", "value": "T10A645CA29307CE5FDC5A573649DB8F3077F255A212638147E225BF2967222C0DF1AE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976366, "uuid": "fa04685c-05ec-4fa2-bdee-aedc1fb1a056", "value": "3072:K75rmCkX4wSuW2UjVs4ryehMRZgDpBrsGqau40JKmpu2dhFZvrDoene4QXUG:bCFAUjVfaRGDpBAq0JRZjDPne47G", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774976366, "uuid": "e5e5c5a9-8359-4da7-93d0-1506e96a98c9", "value": 332691, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976366, "uuid": "e9b6827a-8510-4603-a984-e0d0427f8b29", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34eac014-2d23-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774976466, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976466, "uuid": "5a907443-82e7-4e3a-a372-ac3d4e4ee568", "comment": "Malware payload (Mirai)", "value": "135921dbd4d22ba69c989bed3b49c877", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976466, "uuid": "e3960b43-1ed7-4c2e-80b4-0de5b522859d", "comment": "Malware payload (Mirai)", "value": "aaf1f72b098df2ad84c453306cd96066d533b13b3e90c16c88df9094119a1fe1", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "mossadbotnet", "colour": "#70c6b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976466, "uuid": "f0d36af4-de38-48d1-8a0a-64cf8c0be01b", "value": "T1824423FB15B3F28387FCE9D539DF1A59970143ACB2A62D75D450998AC84C00EAFE97", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976466, "uuid": "fd41359f-ea51-4cf1-ab43-79f76f7795fc", "value": "6144:lt4SvU7e0UD/SOy6Z81KyXT2JsvYfgpuJKplgmohI55ZmCV:wWz/SOyN156JsvYfg8JAFohI55ZmCV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774976466, "uuid": "561e1b5d-5b83-4bb6-8e19-ce4c4c77a452", "value": 274192, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976466, "uuid": "2169f99e-6063-4866-8ac1-c5fadb688989", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8d681fae-2d2d-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774980909, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774980909, "uuid": "38e1360c-b35f-4017-8748-870927579328", "comment": "Malware payload", "value": "cc00867e2413b473427df40a0e00cc55", "object_relation": "md5", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774980909, "uuid": "3ff8de4f-62a6-466f-91e1-ebae4f8ec3ee", "comment": "Malware payload", "value": "df21b6c7d6d1af754503843e02be34fbafed861d2e55213997503a36301f5dca", "object_relation": "sha256", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774980909, "uuid": "1eebb89e-7248-44ad-9c24-e8a359d6c178", "value": "T111E4C787F1209AC7F44FDE7F14504210AEF0E4704607F2562B6E885A6FEB9C89E653", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774980909, "uuid": "fe3518eb-4190-44e8-8042-6956963f8e67", "value": "6144:W1eMX5Uh/W94gpr2TgPjhMoc2/F9SYeU4qezA/B6d48UpKKKn/19p3x1Z5znk:WxbwqLQVZ/1PTk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774980909, "uuid": "edb6a8df-2e45-48ec-94e2-75bd8559206a", "value": 702536, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774980909, "uuid": "e684ef5f-1382-4ae2-9990-7aba70e5dad9", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6da1e5ec-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1774988587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "3b7969ee-fce6-4ebf-a507-2f154f5046d0", "comment": "Malware payload (Phorpiex)", "value": "2ac3deb99004097537876427aa64f475", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "e2894fa2-a1e8-4b46-8a2c-b4092ffa4328", "comment": "Malware payload (Phorpiex)", "value": "825c433a93885727599aa9ce2d1b92074bfb4b12cdb390588cfccce36079c581", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "d200bb76-3b8e-4c68-a523-5c6817d62436", "value": "T1B0824B0FB8424326E0D110B59A62567BD979947673D824EBF7904EEE0A687D1FC332", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "8c8f1a1b-78a9-464c-a60c-5206f563aa5a", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "d674a3ff-4d38-4fcd-b022-7e4f0dfc0663", "value": "384:QI0V5tLwHkvB07rfbdAhZ+Rhav8U9cqS:OUY07rf5AnMha0UZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988587, "uuid": "8db484e6-6e4b-485a-9de7-92607f2bb159", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "4d038700-4844-486a-a34f-1542b6805e6d", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6da36d29-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1774988587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "361986a0-fcb9-4199-81b1-64da9105ef43", "comment": "Malware payload (Phorpiex)", "value": "28ab7738983e80a61e7f2e39ab12804d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "28d6d2d5-c1c0-443b-b27b-b89a55aed389", "comment": "Malware payload (Phorpiex)", "value": "5fcbcff1557b61cacdedf23dfdabe5d303a9edafd911d0c8f7d7cecf0fa2ad2c", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "681c6720-95d8-4215-86fd-fa75b1d520ba", "value": "T120823A0FB8424326E0D110759A62867BD979947673D824EBFB904EEE1A687D1FC332", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "88bdd71e-5d5c-4d83-8885-8c9f7a0f2c7b", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "60c3685c-a7a6-4095-bf91-29b438a7ae0d", "value": "384:kI0VxZjwvcvB0zrfbdAyD+Nhav8U9clS:uIQ0zrf5Awgha0U+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988587, "uuid": "749d0d7a-7b7b-4273-ba15-c2f07760378b", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "e3b8a8ae-2750-4195-8e0a-5e84e35a5eb9", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dab63ad-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1774988587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "ffa0784c-a571-4592-9d47-e6e833f6bddf", "comment": "Malware payload (Phorpiex)", "value": "bda004d9fb98ae6330ff27c5aa20b86d", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "88098b81-16c5-4191-8744-5538ff07d159", "comment": "Malware payload (Phorpiex)", "value": "233031149ce69156b7a312b952801c6aba9cd6581c34b0cb3e95e42c61a84963", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "ab40dfaa-cfb4-443c-86c1-04d2fc51c19e", "value": "T102825B0FB8824626D1D100B59A62467BDAB8A472339858DFFB904EED1B6C6D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "fc585b49-3f5a-4e58-bc65-d0241814a35f", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "5663c4a9-e862-4792-bd46-0920d6cd704e", "value": "384:JrGIUVp9sQofwvBfR0jfbdAyD+DMav8U9c/i:RECQ70jf5Aw6Ma0UY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988587, "uuid": "0281241d-b1b2-4173-8af8-17fd967ee0f8", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "68b14dec-a341-4414-9488-f1ab59dcb47f", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6dabc978-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1774988587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "160ede7b-bf01-4b71-93f2-1e39f5e6df33", "comment": "Malware payload (Phorpiex)", "value": "5433cbe93a9a3250a71e16ec22538f20", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "fd5783cb-2512-43a9-8df5-22900d55416b", "comment": "Malware payload (Phorpiex)", "value": "c6bc3654e32d7d7c0b038e7c882705d169f87410ee7f2533a8c998b2209297bd", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "3cc75eae-c146-4c95-9b52-d6762ce7b56a", "value": "T14C825B0FB8824726D1D110B59A62467BDAB8A472339854DBFB904EED0B6C6D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "8ef0f17b-748b-4745-ace6-60f7bec450b6", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "7ee150c8-ce4b-4591-a830-be8afbd9a9f3", "value": "384:plGIUVp9sQofwzBfR0jfbdAyD+DMav8U9cEi:rECQH0jf5Aw6Ma0Ur", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988587, "uuid": "8bfbfd71-e999-4ea5-bbd8-c238bb963306", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "351ae465-0490-4d16-84f7-b5532157c549", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6db00b49-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774988587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "bcda9711-881f-4b72-be17-1b68ee4ef81a", "comment": "Malware payload", "value": "2aaacf2249d005ec6ea169538d0f63ef", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "b6472d32-4198-4e51-aa86-aa6c37dbd4eb", "comment": "Malware payload", "value": "46706ba670a5ff4bad4d772d15c207a9a6a7c8bdade84b5fc271151b4b97e68e", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "1624e2b7-6324-41a9-9416-4cfad169cbb5", "value": "T17C82080F7B8E6312D0B250B2D522467A8979947BFB8454EBFF904BDA06783D1A8331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "120abb5f-09a2-4ba6-842c-1da093445744", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "08b54524-b89c-4a1e-b93b-76a84ebde5e7", "value": "384:pIdV6DPxmET1QrHf2t9jZ+qav8U9cauS:xUi1QDfEVNa0UPu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988587, "uuid": "001deaa0-6ff9-4bce-8b7a-bdfd83412806", "value": 18944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "19318cea-bdc1-4d21-a448-105c1e031f61", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6db7e03e-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware payload (Phorpiex)", "timestamp": 1774988587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "5c82cb10-b9e0-421f-8571-15bb494466ff", "comment": "Malware payload (Phorpiex)", "value": "0c5a5c179487c02cc74a840025a49596", "object_relation": "md5", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "6367e966-9946-419b-b7a7-3850252a7195", "comment": "Malware payload (Phorpiex)", "value": "7bea83c3f297716ea901b8075d062bb02ce240ab6c5f6fa40ea8ce3f4ffef226", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "f88f9065-ed8b-4a46-a67a-413d00092aea", "value": "T1CC825B0FB8824626D1D100B59A62467BDAB89472339858DFFB904EED0B6C6D1FC331", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "0a01923c-87b4-43da-81aa-7b5cd06e0fdd", "value": "b8b034a37970476c0e8791d5941c31e3", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "4916a533-650d-4340-acb0-2eacdb07b056", "value": "384:M+GIUVp9sHsXwvBfR0jfbdAhZ+DYav8U9cvi:NECHX0jf5An6Ya0UQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988587, "uuid": "0cb2781f-251a-4b9c-9ff5-8205576d428e", "value": 18432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988587, "uuid": "e8456509-8651-4486-8f8f-615bd74c4737", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "205bca74-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774988886, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988886, "uuid": "3d9daa98-7789-4366-b5e8-1857420d36fd", "comment": "Malware payload (Mirai)", "value": "1bd6c79bcbc205fca275a61b247cca2d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988886, "uuid": "0e86714d-0d18-4ed9-8a20-4be68e020e61", "comment": "Malware payload (Mirai)", "value": "43c93faec75852d3f1882f7a4f32571bfcb0687dd01965493b2deedd7d81b1f5", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988886, "uuid": "9afaec06-7438-43d7-8eeb-5eb8175fd611", "value": "T1D743970E2E258FACFBAD863547B79F24964833D627B1C584E16CE9001EB034D745FB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988886, "uuid": "ecb6b3d5-e39a-4b74-b8d0-f93a0649ed01", "value": "1536:ub+kUPQupLfsLfCELfZQ5mREATMNEugjYeV:a+kUP1r7NEusYeV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988886, "uuid": "68abc01e-726c-46ae-bbd5-88c37a5f6c13", "value": 60232, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988886, "uuid": "001c80d8-b3ba-45d5-a93c-dc295f347631", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a2e599-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774988895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "202e599a-69d2-4bdb-bdaa-834c0015f9bb", "comment": "Malware payload (Mirai)", "value": "46692396b005ff407a1cef0e41d6adb9", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "878c605e-4aa6-4268-acfe-bbd427f7608c", "comment": "Malware payload (Mirai)", "value": "d66c95602d1fc469ef09fb33d2c48294f54732c36af91088161e8773ed8daf7f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "e38e7d72-5f1e-4c41-b00b-54e5e440d4fa", "value": "T17553A4197F610FB7EC6FDC3749A92B0525CD650A22A93B397D34D828F70B61B09E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "8cf1f69e-7a9d-4085-b88a-a4872fac872c", "value": "768:8CfAhntqMS0p/nddYlnv9GygQLI+2eBONJnjX4a58Veven/emHxAgT5Xi3UgmN8N:8CfAhsM/g97TO7XzQCe/JRAkgmyjh", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988895, "uuid": "c20c15d0-fb71-4301-b07f-2f053bbeced6", "value": 61528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "82192079-152d-4d23-b131-8ac7d31374af", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a58266-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774988895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "f19133c9-15e4-4c9e-8ec6-1e3ca4fe2cd9", "comment": "Malware payload (Mirai)", "value": "06dace3b6d6b5a31ace7165e3723fd5e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "c0359bb6-c4c5-4b76-b12d-991d29ef1ae1", "comment": "Malware payload (Mirai)", "value": "aaab475eb7b93e1253b382d020c3da14bdda74ac8e17db9de921cd57808e529d", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "b40cb13c-944e-4d52-9c6d-e950a503c294", "value": "T1E2334A26AE7A1E17C0D4A47A62F34329B2F1131F25B8CB2EBDB20E4EFF1554461176", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "178ec8f9-3d57-46be-a58e-5402225c1537", "value": "768:6Kovq9WU0SosBG3c2w8ak1r3lJJRmHUfoO+o8IqGqsg:6KOSWlSosBGs2/r1rVJJRAUfio1g", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988895, "uuid": "69fe8756-e714-41a2-a6c9-36f7bf453ce7", "value": 50884, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "7fae5bb3-f4a6-4152-8099-3780b1fcc076", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25a821e2-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774988895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "3246a384-fcf3-4ad2-91a6-7fe35d74fd97", "comment": "Malware payload (Mirai)", "value": "ede34c63fccc0de523136163439fd811", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "c004b773-1bbc-47c3-b064-86a5827348b9", "comment": "Malware payload (Mirai)", "value": "e658ad0271bf230580f9baa32dfa831ff77ffbafd3278f4ea7f016c9746b9a08", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "c37977be-a89f-497e-955d-a6fbac4826b2", "value": "T128230880B54F85F5D40B4E3040A7F63FDF71D82A40709AAEEF59DF32DB67A4292092", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "87b65b07-f95e-4d44-a0ef-999455137953", "value": "768:5Y6KUkGYYjQnNIJMG21HFRGf8D1okyE9c74rw0C+Ao/LbKYK8VpMF8x:fKUkGYYjQneMGOHFRGf85ok04PAo/PKe", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988895, "uuid": "10772b5a-4f5f-4408-9b0e-4a84234612a3", "value": 46928, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "0b5fa7f4-a367-480e-a337-ddb43cccba49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "25b108fe-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774988895, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "2e3600e5-75fd-403c-bce2-2a7774121356", "comment": "Malware payload (Mirai)", "value": "9ab899cd8ef3f791298c2e39062e8c7b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "07d1469f-fcc6-41be-8878-fa584e815927", "comment": "Malware payload (Mirai)", "value": "1f5a0a2f3ef85dbbad53544199d06bc263b40a474029ac0e5b7931a5f3da6da9", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "98c6644f-231d-4227-8f94-d120841dac2b", "value": "T1D2C33B46EB808B03C4D51775BAEF42493323D755A3DB73069A186FB43F86BAE4E235", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "2ffbd827-a6d4-4f76-a191-e4ae4f2d4aff", "value": "3072:6mL295W0oW5zvnm82C7L0//+AHmDIM/9nT:6mLM5WYbnm82CH0THmUM/9nT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988895, "uuid": "50c0cc24-1061-4c12-a217-1420951e7128", "value": 120609, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988895, "uuid": "5d18b2a2-36fa-4205-94d1-4d57887e87bf", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b77e41d-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774988959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "69af4d08-0611-4643-b86f-34a06121051d", "comment": "Malware payload (Mirai)", "value": "5caf1949d48db6c45c3e5857ef6396cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "1d905afb-38d0-4986-b85a-ab22978c1025", "comment": "Malware payload (Mirai)", "value": "94603f5b09656b6c6793416828e9cc7d18f35b449bfc2a250f198e2b26796c81", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "dceba0b0-26b8-451f-9f7a-c194b38ba500", "value": "T183138CB7C449ADD4C14947B4AA208E3823A3F50083671FFA5E8685A99007EFCF21D3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "c2f0f449-beb2-49c0-8bfb-7e8be2d1e5aa", "value": "768:RYXNhfPu+8r2ePDoLbxOME0ClBsoXYkrxCCo:RYXNh++EoLbxPE0MokrxCCo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988959, "uuid": "bde161c0-f65a-4d38-8422-51144da0fb7c", "value": 42676, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "7c174fa0-ff1c-4fa8-84ad-4d4d3e16b3eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b7f3fae-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774988959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "dcbf5547-c218-4412-aad4-963f336fcdb4", "comment": "Malware payload (Mirai)", "value": "d3d76fa602f70ca6a03e48793c95d94d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "248eac9c-6f4d-401f-8f3f-6355c2858aea", "comment": "Malware payload (Mirai)", "value": "c9beb5ed398e967c6833e6c11dafdc243c7c1593a2e74924b7ac594653dd4cc3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "bcdae890-739f-4a81-ba85-d66577a4c649", "value": "T1F4232A07A58580FCC56DC17846BBB93EC92775BE0239B2EA7BD4FF267889E210E1D5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "320e8637-0850-41ab-b0f2-c697ba42badc", "value": "768:owLvSBiA/UTzQGNdlIwt3v+AA01W2esezgljpakgPMfAxXGnbKC8OIzJyJVm:LvSo1TzQG7lIW3v+cTYgljElU5bxoVyD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988959, "uuid": "245cec14-4278-4da2-a706-2dbc2cb39dfb", "value": 47008, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "92748f86-107a-4876-9c97-a355cf6f0a23", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b802b38-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774988959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "fc047625-38b7-40e8-881f-5b51ae243322", "comment": "Malware payload (Mirai)", "value": "b9c785d1b0213609a30a749326ca8423", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "24a3b6c8-385f-4849-993c-f9bce1c5749a", "comment": "Malware payload (Mirai)", "value": "18dbd099e3e1eeb4148b757e06a2d8c34b2e8cb866364006c1719353df8a6c70", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "e078ebd0-b30c-4948-b0c7-f39f29e03fc7", "value": "T12E231781B8D19A12C9D453B7FA5E418E33256398E2DF33079D222F547BD682F0D7B6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "65bdd10b-08ec-46d1-9152-06aec762d1c1", "value": "768:Pu5lt0vq1lCCZdnLTaW7nDfaZNtPmGehIWvLci4fyQpn83ZNOPcusLS:qlivUY8LTN7nLaZ/jWLGaQpn8H+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988959, "uuid": "1a27a74f-6c16-44fc-b4b9-f06262c79281", "value": 46968, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "327b5046-5bed-4826-aafd-d9871ce7d4b8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4b81b05c-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1774988959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "0193a4f5-e131-479c-8a78-2eb355e452ea", "comment": "Malware payload (Mirai)", "value": "6a513d35bfd63b5082536cd0bc84657f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "785102dc-1bdd-4bb6-a214-3bc9594cea77", "comment": "Malware payload (Mirai)", "value": "0cb1f23f92b965c4e56e5ff0daf6ecb504bf4492ee59265470715ad4a25a7516", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "2927a416-b1fd-4673-9242-519833b5801c", "value": "T18E13F785BC918A2AC9E427BAFA6F418E3321B3D8D2DF3617DC111B147B8591F0D67B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "40b74f1a-92af-4237-99ed-d649d21ba834", "value": "768:rrPw5kZ//DAdGWc8RuP1suK9EDfkaI/TKlUqel4WvLMkvWHOEUNc:AaZMkERpuKKDfkaI2CkWLGHOa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774988959, "uuid": "3170c7ec-28c7-4c31-b65e-b2ffa05855b3", "value": 43092, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988959, "uuid": "d4458daa-8f9e-4bb2-81a6-5a26bb01cf40", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "61d3f8e1-2d48-11f1-bc00-82aee05be84a", "comment": "Malware payload (ACRStealer)", "timestamp": 1774992432, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992432, "uuid": "63ce5702-d8b9-46cb-97a8-ded37004cc90", "comment": "Malware payload (ACRStealer)", "value": "091048e5a87ba7cc427f8fffdd2b5a40", "object_relation": "md5", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992432, "uuid": "7c7cfe9e-8f39-4869-9b3b-bf200a1df511", "comment": "Malware payload (ACRStealer)", "value": "147b20174a0c78fc72b79ca1f78130f601097771d75ae8bf8b173db47d7da199", "object_relation": "sha256", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false }, { "name": "NetSupport", "colour": "#f4aa26", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992432, "uuid": "d8ae6ee7-e169-4474-85e4-fe046b253052", "value": "T1EF364B0BFCA158E5C4A982348967871ABA717C851F3163DB2EB0B7782F327D019F5B", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992432, "uuid": "a6ee7310-c27c-4c98-aa8e-50427889cab0", "value": "534141bbeafb0cfa024f8b6830c176a9", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992432, "uuid": "b1cb8d7a-6628-4f31-bdbb-6f94a118f703", "value": "49152:/lYNMTWAqOTGSIDk1OVGre+8Dgdv2cKE6Emp4sajYMtsQQclnYWoyhnpc:/lJqUMcK/NAamYY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774992432, "uuid": "93b6340d-6c73-4ff5-9c8b-eb255eb6cdd4", "value": 4919808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992432, "uuid": "f5c4c8a8-9936-4ea5-a378-da47848130cc", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ce54694c-2d48-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774992614, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992614, "uuid": "685d7924-46e3-477a-8d51-4cf7577dcdb1", "comment": "Malware payload", "value": "0ba359f7c54e87a405d972241304b9d9", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992614, "uuid": "5b8f6a73-6466-40ae-900f-430005bd32c0", "comment": "Malware payload", "value": "c6d3cd5df60c8054c5ff42bbc0fc18be2b5876dce547a57660f7351d0d6bdd46", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992614, "uuid": "2729d835-eae7-4c3c-999d-252716019ecb", "value": "T19704E5E3730106BFB974CC6FBA1B4DCA507ABF1287A4B1A197CA68949074787D1347", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992614, "uuid": "3eff843f-a80a-46f7-8973-0963357ed2c2", "value": "3072:880+5ai8sLHNurbFx9yck2qKODr4qzf9ESXMz6TkfmN:RezfE", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774992614, "uuid": "9ca3a4a8-6909-4c46-b7f3-c6e78693a7fe", "value": 177737, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992614, "uuid": "653e2ee5-d2dc-4e15-9b0a-87bd13aa5b52", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04a8bf6f-2d4a-11f1-bc00-82aee05be84a", "comment": "Malware payload", "timestamp": 1774993135, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1774993135, "uuid": "509239f5-0533-4dc2-8305-6331f13383a0", "comment": "Malware payload", "value": "f1271a9010ed4456895c40290055e449", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1774993135, "uuid": "ae6d7d09-9889-4083-a61e-725890b720c9", "comment": "Malware payload", "value": "0608577062a6849095914e14fee5eb9e46f60e9c07dd4bf8a74bf701fc033295", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1774993135, "uuid": "385ae0b4-9bc5-47ab-ad13-a395faecc851", "value": "T105D4DF2A49592F22C99370BE28B3296A9F29F04475E86F071EFD50B1491771E2F213", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1774993135, "uuid": "9b393e39-9288-459d-bfcb-a41f0a0ee6d0", "value": "12288:klwf31XNLT7TY4dKf1COlo7Y6OD4uPdX67tqw9aK5XWro:kCNdLP8f1CWTswKYro", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1774993135, "uuid": "fa7856bf-f2cc-4dfb-836d-f1395113c2af", "value": 624341, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1774993135, "uuid": "b9964a4c-ab1c-42e3-b176-8b46ec50eac3", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774915571, "uuid": "6d040215-2c95-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://math-proc.axiomforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774915746, "uuid": "d5847a47-2c95-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.101.50:33151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774915875, "uuid": "22731557-2c96-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://stat-portal.axiomforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774916001, "uuid": "6d62c63c-2c96-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.74:49907/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774916234, "uuid": "f7ef2093-2c96-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://micro-chip.circuitflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774916414, "uuid": "637e0e69-2c97-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.176:45853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774916532, "uuid": "a9ee0ecc-2c97-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://volt-power.circuitflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774916830, "uuid": "5b2a6868-2c98-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://signal-box.circuitflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774917253, "uuid": "57bf5652-2c99-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://wire-sync.circuitflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774917426, "uuid": "be549967-2c99-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.230.148.181:55083/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774917427, "uuid": "bf1308c2-2c99-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.117.162:54988/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774917549, "uuid": "07df70d8-2c9a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://amp-control.circuitflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774917626, "uuid": "35eccf06-2c9a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.63.74:49907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774917911, "uuid": "df9ec6a7-2c9a-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bus-bridge.circuitflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774917973, "uuid": "0499220a-2c9b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.237.101.50:33151/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774918274, "uuid": "b7cd7b14-2c9b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://north-star.polarisbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774918326, "uuid": "d7007685-2c9b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.37.129:51161/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774918326, "uuid": "d7113e90-2c9b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.242.236:44360/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774918386, "uuid": "fb06e493-2c9b-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.197.131:39690/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774918633, "uuid": "8e4cec82-2c9c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://guide-path.polarisbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774918814, "uuid": "fa2f33f1-2c9c-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.206.86:59947/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774918926, "uuid": "3c7f6f8d-2c9d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://81.230.148.181:55083/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774919174, "uuid": "d089e67b-2c9d-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-render.polarisbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774919349, "uuid": "3904c299-2c9e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://peak-access.polarisbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774919650, "uuid": "ec62c781-2c9e-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-store.polarisbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774920014, "uuid": "c507fb0b-2c9f-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ice-vault.polarisbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774920250, "uuid": "51b2a154-2ca0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sun-flare.helioshaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774920615, "uuid": "2b65273e-2ca1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://heat-shield.helioshaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774920800, "uuid": "99ca62e5-2ca1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.18.160:39927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774921091, "uuid": "47330d11-2ca2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solar-api.helioshaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774921334, "uuid": "d7fc0714-2ca2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://day-light.helioshaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774921334, "uuid": "d81e01f4-2ca2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.206.86:59947/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774921453, "uuid": "1ee61b00-2ca3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.176:33525/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774921574, "uuid": "66faa85d-2ca3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-edge.helioshaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774921627, "uuid": "865540c5-2ca3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.229.188:40952/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774921931, "uuid": "3b9008c7-2ca4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://warm-cache.helioshaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774922291, "uuid": "128ba5c8-2ca5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://power-drive.dynaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774922417, "uuid": "5d411891-2ca5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.48:51990/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774922592, "uuid": "c5ad89d5-2ca5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kinetic-io.dynaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774922889, "uuid": "76e21bde-2ca6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://torque-svc.dynaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774922896, "uuid": "7b2921a5-2ca6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.42.33.176:33525/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774923251, "uuid": "4e5fed47-2ca7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://motor-unit.dynaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774923612, "uuid": "2597d766-2ca8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://spin-relay.dynaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774923970, "uuid": "fb110ef4-2ca8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fast-trace.dynaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924095, "uuid": "459dc5e2-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.44.86:58703/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924095, "uuid": "45baa917-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.44.86:58703/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924217, "uuid": "8e59db1e-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.152.60:50583/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924269, "uuid": "ad9115e9-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-space.cosmoforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "cfedf3a7-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/lovlovlo15/chronicles-of-aethergate/refs/heads/main/saves/of-aethergate-chronicles-v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "cff379cd-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/xplam-den/Snake-Game-with-RL/refs/heads/master/algophilist/RL_with_Game_Snake_v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "d01ddfd1-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/xplam-den/Snake-Game-with-RL/raw/refs/heads/master/algophilist/RL_with_Game_Snake_v2.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924327, "uuid": "d03c67df-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Eman420-art/saywhat_menu/refs/heads/main/pyracene/saywhat-menu-v3.0-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924328, "uuid": "d0485e91-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jayasuryapalagiri/Midterm-Website-Development-Jayasurya/raw/refs/heads/main/pedological/Development_Jayasurya_Midterm_Website_v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924328, "uuid": "d04ee480-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jayasuryapalagiri/Midterm-Website-Development-Jayasurya/refs/heads/main/pedological/Development_Jayasurya_Midterm_Website_v1.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924328, "uuid": "d04f06f7-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Eman420-art/saywhat_menu/raw/refs/heads/main/pyracene/saywhat-menu-v3.0-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924328, "uuid": "d04f92e5-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jayasuryapalagiri/Alien-Nostromo-archives/raw/refs/heads/main/cradge/Nostromo-Alien-archives-3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924328, "uuid": "d0cfe71a-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jayasuryapalagiri/Alien-Nostromo-archives/refs/heads/main/cradge/Nostromo-Alien-archives-3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924329, "uuid": "d14b2583-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/MomenMatouk/ruby-vgr/raw/refs/heads/main/mnemotechnic/ruby_vgr_2.0.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924331, "uuid": "d282979a-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/lovlovlo15/chronicles-of-aethergate/raw/refs/heads/main/saves/of-aethergate-chronicles-v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924335, "uuid": "d4edad5b-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.81:59981/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924387, "uuid": "f3af96ef-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Yns70/textgame/raw/refs/heads/main/brachiorrhachidian/Software-1.0-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924387, "uuid": "f3c44a33-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Yns70/textgame/refs/heads/main/brachiorrhachidian/Software-1.0-beta.5.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924447, "uuid": "1785e369-2caa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.46.48:51990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924632, "uuid": "85a2902f-2caa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-field.cosmoforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774924989, "uuid": "5a484e82-2cab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://void-gate.cosmoforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925119, "uuid": "a7c70ddf-2cab-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.84:32883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925289, "uuid": "0d82301d-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nova-core.cosmoforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925592, "uuid": "c1c80916-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dark-matter.cosmoforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "e361eac4-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Flipflip563/YICB/raw/refs/heads/main/airless/Software-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "e377f069-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/jasminahyperthermal488/utility-for-fortnite-noclip/refs/heads/main/Cheka/noclip-fortnite-utility-for-1.6-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "e3819bab-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Flipflip563/YICB/refs/heads/main/airless/Software-2.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "e3864468-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/eastgerman-internist198/raylib-template/raw/refs/heads/main/raylib-5.5_linux_amd64/lib/template_raylib_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "e38d0230-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/jasminahyperthermal488/utility-for-fortnite-noclip/raw/refs/heads/main/Cheka/noclip-fortnite-utility-for-1.6-alpha.4.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925648, "uuid": "e39b1bcb-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/eastgerman-internist198/raylib-template/refs/heads/main/raylib-5.5_linux_amd64/lib/template_raylib_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925649, "uuid": "e3b05694-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Valentindelahaye8/LeviLauncher-MaterialBinLoader/raw/refs/heads/master/Mediaqueries/LeviLauncher-MaterialBinLoader_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925649, "uuid": "e3ba8d5d-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Valentindelahaye8/LeviLauncher-MaterialBinLoader/refs/heads/master/Mediaqueries/LeviLauncher-MaterialBinLoader_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774925951, "uuid": "97d83a4c-2cad-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://orbit-path.cosmoforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774926187, "uuid": "24c28ff2-2cae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:54582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774926188, "uuid": "2537267d-2cae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:59043/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774926307, "uuid": "6c5ca19d-2cae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.55.28:39334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774926377, "uuid": "95ae7a35-2cae-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://reaction-api.catalyticprocess.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774926670, "uuid": "4487f9f4-2caf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://yield-monitor.catalyticprocess.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774926970, "uuid": "f76069a5-2caf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solvent-vault.catalyticprocess.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927330, "uuid": "cdea3484-2cb0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://filter-press.catalyticprocess.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927337, "uuid": "d1f304d3-2cb0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.110:54582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927629, "uuid": "804ef3b7-2cb1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://batch-report.catalyticprocess.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927817, "uuid": "f070581e-2cb1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.88.136.194:59043/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927929, "uuid": "32f0212d-2cb2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.46.51:34711/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774927932, "uuid": "34cabb58-2cb2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://agent-proxy.catalyticprocess.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774928289, "uuid": "098562f1-2cb3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://atom-lattice.molecularbonding.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774928415, "uuid": "5491088d-2cb3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.196.124:44815/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774928650, "uuid": "e0e7019e-2cb3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://chain-logic.molecularbonding.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929008, "uuid": "b5cc9522-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Avhasei07/DevilConnection-Russian-Localization/refs/heads/main/heriot/Russian_Devil_Connection_Localization_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929008, "uuid": "b5e38744-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Avhasei07/DevilConnection-Russian-Localization/raw/refs/heads/main/heriot/Russian_Devil_Connection_Localization_v2.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929011, "uuid": "b7ec693f-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.195.59:35343/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929013, "uuid": "b90a8aef-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://covalent-hub.molecularbonding.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929068, "uuid": "d99b5b61-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.236.223.242:48800/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929068, "uuid": "d9b4a34b-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.227.63.144:51956/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929068, "uuid": "d9e03737-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.180.81:48800/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929068, "uuid": "d9e9ad1e-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.106:51457/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929068, "uuid": "d9f689fe-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.235.229:59423/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929068, "uuid": "d9ff60a1-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.128.106:51457/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929069, "uuid": "da1f89c2-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.77.150:58388/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929069, "uuid": "da2e2915-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.68.67:41361/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929069, "uuid": "da356408-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.68.67:41361/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929069, "uuid": "da4eaa51-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.58.64.161:9454/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929069, "uuid": "da52f0a9-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.193.113:47832/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929069, "uuid": "daaf4b1f-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.132.87:39486/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929126, "uuid": "fc9424bf-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.72:46880/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929127, "uuid": "fcc20e60-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.247.88.72:46880/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929128, "uuid": "fd8ee736-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.166.90:55722/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929128, "uuid": "fda57496-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.78.224:35473/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929129, "uuid": "fddca4ff-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.237.130.120:49016/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929129, "uuid": "fde07887-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.78.224:35473/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929129, "uuid": "fdf357f5-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.68.233:44121/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929129, "uuid": "fdf442a9-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.156.176.206:50260/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929141, "uuid": "05546b92-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.89.72.198:55888/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929189, "uuid": "220033cf-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.41:51045/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929195, "uuid": "25398cc7-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.57.180.81:48800/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929195, "uuid": "253b86e5-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.77.150:58388/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929195, "uuid": "2551153c-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.88.34:53224/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929196, "uuid": "25d45bb1-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.154.118.223:55245/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929245, "uuid": "433ae822-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.107.41:51045/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929314, "uuid": "6c7aa108-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ion-channel.molecularbonding.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929427, "uuid": "afe3df2e-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.46.51:34711/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929615, "uuid": "1feb728a-2cb6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://stable-node.molecularbonding.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929729, "uuid": "63dcbef2-2cb6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.244.236:33143/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774929736, "uuid": "680628ef-2cb6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.187.55.28:39334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930030, "uuid": "173c2c60-2cb7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://force-field.molecularbonding.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930155, "uuid": "61f3b8fb-2cb7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.218.176:47971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930328, "uuid": "c8e186c6-2cb7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.195.148:52121/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930330, "uuid": "c9faf682-2cb7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://heat-sensor.isothermalmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930389, "uuid": "ecf64672-2cb7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:59911/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930690, "uuid": "a08b52bf-2cb8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://constant-io.isothermalmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930867, "uuid": "09f83e31-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/HarryRyanBarr/yarpe/refs/heads/main/renpy/Software-3.5-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930867, "uuid": "09fddde7-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/HarryRyanBarr/yarpe/raw/refs/heads/main/renpy/Software-3.5-alpha.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930928, "uuid": "2e7316a0-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/aslekarii/proxmox-nvidia-vfio-handoff/refs/heads/main/autogeneal/vfio-proxmox-handoff-nvidia-v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930928, "uuid": "2e8db275-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/skidgang/discord-lanyard-activity/raw/refs/heads/main/demo/src/discord-activity-lanyard-tour.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930929, "uuid": "2ec0446f-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/skidgang/discord-lanyard-activity/refs/heads/main/demo/src/discord-activity-lanyard-tour.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930929, "uuid": "2ee51173-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/aslekarii/proxmox-nvidia-vfio-handoff/raw/refs/heads/main/autogeneal/vfio-proxmox-handoff-nvidia-v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930987, "uuid": "51b980bc-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/talangojames51/io5/refs/heads/main/5/83.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930988, "uuid": "51ebe2f0-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/talangojames51/io5/raw/refs/heads/main/5/83.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930988, "uuid": "521ee5d8-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/talangojames51/io5/refs/heads/main/5/86.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930988, "uuid": "5276713d-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/talangojames51/io5/raw/refs/heads/main/5/86.txt", "Tag": [ { "name": "lua", "colour": "#aee004", "exportable": true, "hide_tag": false }, { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774930993, "uuid": "5510c883-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cold-bridge.isothermalmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931349, "uuid": "29703b8a-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/refs/heads/main/source/dxsdk/Mode_Wars_ON_Developer_Resolution_P_Lego_Star_FI_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "29c842ee-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/raw/refs/heads/main/source/dxsdk/Mode_Wars_ON_Developer_Resolution_P_Lego_Star_FI_v3.9.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "29d4c46a-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/raw/refs/heads/main/source/dxsdk/lib/x64/Developer-Wars-FI-Star-ON-Resolution-P-Mode-Lego-v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "29d51590-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/raw/refs/heads/main/source/dxsdk/lib/x86/ON-P-Mode-Developer-Lego-FI-Star-Resolution-Wars-1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "29fb660b-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/refs/heads/main/source/dxsdk/lib/x86/ON-P-Mode-Developer-Lego-FI-Star-Resolution-Wars-1.1.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "2a105c44-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/Haylandercaio/Lego-Star-Wars-2005-PC-Resolution-FIX-DeveloperModeON/refs/heads/main/source/dxsdk/lib/x64/Developer-Wars-FI-Star-ON-Resolution-P-Mode-Lego-v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931350, "uuid": "2a1c1afa-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://temp-archive.isothermalmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931713, "uuid": "024481d7-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://thermal-sync.isothermalmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931774, "uuid": "26742b71-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.218.176:47971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931892, "uuid": "6cf731bd-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:59911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931950, "uuid": "8f9c1319-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://range-finder.isothermalmetric.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774931956, "uuid": "93444e7b-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.241:56948/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932012, "uuid": "b47f71d2-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.195.148:52121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932128, "uuid": "f9f7967c-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sethudevasenapathy92/sethudevasenapathy92.github.io/raw/refs/heads/main/cultigen/sethudevasenapathy_github_io_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932128, "uuid": "f9f9289a-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sethudevasenapathy92/sethudevasenapathy92.github.io/refs/heads/main/cultigen/sethudevasenapathy_github_io_3.7.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "fa10ce8a-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sethudevasenapathy92/GTAO_SoloSession/raw/refs/heads/main/GTAO_SoloSession/Solo-Session-GTA-v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "fa11e42e-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sethudevasenapathy92/GTAO_SoloSession/refs/heads/main/GTAO_SoloSession/Solo-Session-GTA-v2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "fa1f0c5f-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/sethudevasenapathy92/sethudevasenapathy92.github.io/raw/refs/heads/main/cultigen/sethudevasenapathy-io-github-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "fa29d681-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/sethudevasenapathy92/sethudevasenapathy92.github.io/refs/heads/main/cultigen/sethudevasenapathy-io-github-2.2.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "fa338801-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/light-077/chatbot-gaming-assistant/raw/refs/heads/main/my_agent/chatbot_assistant_gaming_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932129, "uuid": "fa5b365f-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/light-077/chatbot-gaming-assistant/refs/heads/main/my_agent/chatbot_assistant_gaming_v1.8.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932246, "uuid": "40414135-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/cradzz14/Gamification-In-Software-Project-Management/refs/heads/main/unmeltableness/Software_Management_Project_In_Gamification_v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932246, "uuid": "4051416e-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cradzz14/Gamification-In-Software-Project-Management/raw/refs/heads/main/unmeltableness/Software_Management_Project_In_Gamification_v2.6.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932247, "uuid": "408fe785-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/cradzz14/Gamification-In-Software-Project-Management/raw/refs/heads/main/unmeltableness/Management_Project_Gamification_In_Software_2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932249, "uuid": "41a3c145-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/cradzz14/Gamification-In-Software-Project-Management/refs/heads/main/unmeltableness/Management_Project_Gamification_In_Software_2.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932249, "uuid": "41d6fa90-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/tribalwarsaaa/vfio-windows-aio/raw/refs/heads/main/assets/windows-vfio-aio-3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932249, "uuid": "41e413a7-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/tribalwarsaaa/vfio-windows-aio/refs/heads/main/assets/windows-vfio-aio-3.3.zip", "Tag": [ { "name": "SmartLoader", "colour": "#516cf3", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932312, "uuid": "671fd311-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://resin-store.syntheticpolymer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774932670, "uuid": "3ccade06-2cbd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fiber-optic.syntheticpolymer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774933029, "uuid": "12ac2d49-2cbe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://plastic-dev.syntheticpolymer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774933148, "uuid": "59e9e812-2cbe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.228.241:56948/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774933389, "uuid": "e9416077-2cbe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mold-engine.syntheticpolymer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774933395, "uuid": "ece1eb5f-2cbe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.112.174:35145/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774933455, "uuid": "1080978f-2cbf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.112.174:35145/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774933633, "uuid": "7b040215-2cbf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:56164/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774933689, "uuid": "9c1a4648-2cbf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://elastic-net.syntheticpolymer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934054, "uuid": "75cf044b-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:55586/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934112, "uuid": "983a667c-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://blend-master.syntheticpolymer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934117, "uuid": "9b1e5572-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.23:40200/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df834bb3-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.powerpc-440fp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df85374a-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.sh4", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df87cbb3-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.x86_64", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df87d017-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.i586", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df881541-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.armv6l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df881729-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.armv4l", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df883474-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.powerpc", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df884099-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.i486", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df884c9d-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.mipsel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df885a68-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.m68k", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934232, "uuid": "df897e80-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.160.125.125:15527/bot.x86", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934287, "uuid": "00d7e337-2cc1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.154.118.223:55245/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934351, "uuid": "26c53d9a-2cc1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fluid-path.viscositycontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774934653, "uuid": "da801702-2cc1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://thick-layer.viscositycontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774935019, "uuid": "b5147a40-2cc2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.69.149:56164/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774935069, "uuid": "d2f23e1d-2cc2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://flow-regulator.viscositycontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774935434, "uuid": "ac343203-2cc3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://friction-log.viscositycontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774935549, "uuid": "f0b47828-2cc3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.88:51536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774935738, "uuid": "61b32f44-2cc4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:55586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774935748, "uuid": "6726551e-2cc4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.210:42514/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774935859, "uuid": "a9a68ba6-2cc4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.164.128.50:33037/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774935911, "uuid": "c8a23896-2cc4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.163.7:52361/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774935971, "uuid": "ec9aa6b4-2cc4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://density-svc.viscositycontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774936030, "uuid": "0f3412ef-2cc5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.149.180:56903/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774936155, "uuid": "59c7d5d3-2cc5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pump-gate.viscositycontrol.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774936390, "uuid": "e6057e40-2cc5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://brick-layer.refractorymatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774936691, "uuid": "99670cd3-2cc6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://kiln-control.refractorymatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774937112, "uuid": "9450db5c-2cc7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-heat.refractorymatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774937413, "uuid": "47f61836-2cc8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://shield-base.refractorymatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774937598, "uuid": "b6214d05-2cc8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.47.80:41423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774937709, "uuid": "f8348512-2cc8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.163.7:52361/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774937769, "uuid": "1c1a2b2d-2cc9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://solid-state.refractorymatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774937842, "uuid": "4777eaff-2cc9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.111.48:57377/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774937896, "uuid": "67b2499d-2cc9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.190.105.170:52231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774938074, "uuid": "d1d670b6-2cc9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fire-wall.refractorymatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774938433, "uuid": "a787ccc9-2cca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-level.alkalineelement.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774938439, "uuid": "aba165fd-2cca-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.9.210:42514/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774938680, "uuid": "3b005ad2-2ccb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.207.250.191:46536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774938868, "uuid": "ab5114e9-2ccb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.231.44.55:48069/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774939030, "uuid": "0b7aefd6-2ccc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ph-monitor.alkalineelement.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774939215, "uuid": "79bdb04a-2ccc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://salt-buffer.alkalineelement.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774939272, "uuid": "9bc0ee86-2ccc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.67:47809/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774939393, "uuid": "e3dbd88e-2ccc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://caustic-api.alkalineelement.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774939399, "uuid": "e7bb87c1-2ccc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.206.111.48:57377/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774939451, "uuid": "06918371-2ccd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.213.123.169:52883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774939635, "uuid": "74769efd-2ccd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:42669/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774939637, "uuid": "752fb3a7-2ccd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.133.31:33008/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774939753, "uuid": "baaee6e3-2ccd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://reactive-hub.alkalineelement.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940049, "uuid": "6aee7983-2cce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://metal-trace.alkalineelement.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940059, "uuid": "711b9e8b-2cce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.97.32:42669/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940168, "uuid": "b235ae93-2cce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.231.44.55:48069/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940239, "uuid": "dc288746-2cce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.134.173.170:43285/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940291, "uuid": "fb66fb3d-2cce-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.207.250.191:46536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940359, "uuid": "23ca6b01-2ccf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.174.62:36200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940363, "uuid": "26295e1c-2ccf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.25.41:38187/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940416, "uuid": "46041595-2ccf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://half-life.isotopecleaner.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940659, "uuid": "d64c8a88-2ccf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.60.190:52268/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940712, "uuid": "f665c9dd-2ccf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://trace-element.isotopecleaner.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940827, "uuid": "3a826c3e-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://179.43.186.246:14888/download/0e23d66b-d075-445a-bc56-e0d05a633724", "Tag": [ { "name": "clearwater", "colour": "#6b4e95", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940837, "uuid": "40b082af-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.244.67:47809/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940904, "uuid": "68aaeee0-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.238.198:39150/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774940960, "uuid": "89d21f69-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.213.123.169:52883/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774941017, "uuid": "ac2c4e3a-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:34574/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774941130, "uuid": "ef38c05b-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://decay-check.isotopecleaner.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774941139, "uuid": "f47621e3-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.133.31:33008/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774941425, "uuid": "9f698f4a-2cd1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:60404/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774941430, "uuid": "a1f85000-2cd1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://radiant-log.isotopecleaner.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774941792, "uuid": "7a0bc9ee-2cd2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alpha-gate.isotopecleaner.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774942152, "uuid": "502cabe1-2cd3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://beam-portal.isotopecleaner.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774942218, "uuid": "77a449da-2cd3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.163.233:58676/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774942452, "uuid": "032620e2-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-freeze.cryogenicbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774942517, "uuid": "2a3fdfb4-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.238.198:39150/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774942812, "uuid": "da130de6-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://nitro-vault.cryogenicbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774942812, "uuid": "da1326c0-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.39.88:51536/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774942815, "uuid": "db784ecf-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.176.44:39750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774942874, "uuid": "ff157d6f-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.254.103:44553/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774943169, "uuid": "aed3e54a-2cd5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zero-point.cryogenicbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774943471, "uuid": "6284afba-2cd6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://frost-node.cryogenicbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774943471, "uuid": "62e96103-2cd6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.145.59:55856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774943527, "uuid": "8403652e-2cd6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.53.236:60404/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774943956, "uuid": "83e6d639-2cd7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.146.163.233:58676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774944070, "uuid": "c797148c-2cd7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://chilled-link.cryogenicbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774944250, "uuid": "32b66f78-2cd8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gas-storage.cryogenicbuffer.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774944320, "uuid": "5cd2dc66-2cd8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.176.44:39750/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774944431, "uuid": "9ee59b7a-2cd8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alloy-forge.metallurgiclink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774944439, "uuid": "a3bb6a0c-2cd8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.182.145.59:55856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774944739, "uuid": "563ce7d0-2cd9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.254.103:44553/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774944851, "uuid": "99181c25-2cd9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.58.187:56676/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774944851, "uuid": "994dbc05-2cd9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://steel-core.metallurgiclink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774944922, "uuid": "c37fa853-2cd9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.176.230:44425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774945028, "uuid": "02f8114b-2cda-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.86.211:40376/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774945215, "uuid": "7205d08c-2cda-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://smelt-logic.metallurgiclink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774945453, "uuid": "001348f6-2cdb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://blast-svc.metallurgiclink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774945813, "uuid": "d6d4c203-2cdb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cast-iron.metallurgiclink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774946114, "uuid": "8a087d4d-2cdc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mine-trace.metallurgiclink.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774946536, "uuid": "858313c4-2cdd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.176.230:44425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774946591, "uuid": "a698bb48-2cdd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://paui.paleontraglan.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774946779, "uuid": "16ad0fb5-2cde-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.250.158.32:39717/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774946890, "uuid": "58671196-2cde-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://l4b-mesh.paleontraglan.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774947316, "uuid": "56a67a17-2cdf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.172.191:42231/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774947317, "uuid": "56e5ae88-2cdf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.131.9:33918/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774947370, "uuid": "766cabdc-2cdf-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://hardexte.paleontraglan.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774947789, "uuid": "707e26e6-2ce0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dyn-valeal.paleontraglan.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774947860, "uuid": "9a9ce205-2ce0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.147.157.129:55169/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948089, "uuid": "230c164c-2ce1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://180.245.47.80:41423/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948150, "uuid": "47aa97d0-2ce1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://oasitre.paleontraglan.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948409, "uuid": "e21d2abf-2ce1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.166.217.21:33418/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948512, "uuid": "1f92c251-2ce2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vorforgeet.paleontraglan.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948518, "uuid": "231475a1-2ce2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.50.197:50181/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948521, "uuid": "24b31f62-2ce2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.56.226:39292/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948701, "uuid": "90044640-2ce2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.56.226:39292/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948927, "uuid": "169b4817-2ce3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://90.224.208.190:45821/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948927, "uuid": "16abee26-2ce3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.231.36:52341/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948929, "uuid": "17b34bbb-2ce3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.215.208.100:50461/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774948993, "uuid": "3e19022d-2ce3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://decode-frame.chernomofnothes.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774949352, "uuid": "141b91df-2ce4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://basaltextend.chernomofnothes.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774949360, "uuid": "18854fd8-2ce4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://46.163.184.136:49029/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774949423, "uuid": "3e7e213e-2ce4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.208.164.149:45464/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774949479, "uuid": "5fbcd53a-2ce4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.131.9:33918/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774949716, "uuid": "ecb61075-2ce4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://protectsup.chernomofnothes.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774950085, "uuid": "c91df38f-2ce5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.166.217.21:33418/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774950133, "uuid": "e57d8110-2ce5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gr0v-hold.chernomofnothes.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774950143, "uuid": "ebad6ce2-2ce5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.253.116:46861/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774950200, "uuid": "0dbe8102-2ce6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.197.131:39690/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774950258, "uuid": "2fc81b5c-2ce6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.50.197:50181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774950373, "uuid": "746a972e-2ce6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.67.171:43887/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774950373, "uuid": "747f932d-2ce6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.32.152:46663/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774950492, "uuid": "bb3f8edf-2ce6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://taldrais3.chernomofnothes.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774950915, "uuid": "b7c42ebf-2ce7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://m0on-flow.chernomofnothes.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774951334, "uuid": "b15dc53d-2ce8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://crawlerstor.radiatebeef.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774951344, "uuid": "b7090931-2ce8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://167.250.158.32:39717/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774951818, "uuid": "d21ce812-2ce9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vn06.radiatebeef.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774952058, "uuid": "60ee910e-2cea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.32.152:46663/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774952118, "uuid": "8495e9be-2cea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://5ucnd.radiatebeef.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774952122, "uuid": "874ff404-2cea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.231.36.162:55536/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774952232, "uuid": "c8550895-2cea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.136.33.111:44856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774952300, "uuid": "f11ce339-2cea-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.223:56393/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774952531, "uuid": "7b168534-2ceb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://verify-invoi.radiatebeef.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774952951, "uuid": "7556cad7-2cec-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://waveque.radiatebeef.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774953313, "uuid": "4d1ad3bc-2ced-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://carg-man.radiatebeef.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774953732, "uuid": "46c84c3d-2cee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.1.224:41751/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774953792, "uuid": "6a65c1ba-2cee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://d3nse-gate.beltfloor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774953918, "uuid": "b5a22d78-2cee-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.128:52610/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954090, "uuid": "1c21bbdb-2cef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://f4br2-scope.beltfloor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954162, "uuid": "46cf5e14-2cef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.87.223:56393/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954283, "uuid": "8f460859-2cef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.37.212.67:43258/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954393, "uuid": "d06f1cfa-2cef-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sterilelan.beltfloor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954626, "uuid": "5b52ae52-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://person.dians-store-ison.top/MSI_215033.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954627, "uuid": "5c3d6a51-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://mapshdi.wildscreeen.shop/MSI_073826.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954627, "uuid": "5c4713ba-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://payable-notifications.org/RHpGTQwb/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954628, "uuid": "5cfd373a-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vault88x.secure-efficient2.su/MSI_054600.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954629, "uuid": "5d41beb2-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.9.225.38/img/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954629, "uuid": "5d7ce2f7-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://digitalauralab.com/pictures/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954629, "uuid": "5d9bfa9e-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafybeidt676k2hl7b7ayspwpxaexs3adgw5jyt7e2f62u3bfje3pk5u3ou/", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954629, "uuid": "5d9c2ec2-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gateway.lighthouse.storage/ipfs/bafybeidt676k2hl7b7ayspwpxaexs3adgw5jyt7e2f62u3bfje3pk5u3ou", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954630, "uuid": "5daae490-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://198.12.83.76/img/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954633, "uuid": "5f99ac2f-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://fullclear-seven.vercel.app/mp.msi", "Tag": [ { "name": "LogMeIn", "colour": "#929b94", "exportable": true, "hide_tag": false }, { "name": "msi", "colour": "#978c67", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954633, "uuid": "5fa81439-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://reutilizemais.co.mz/sehhs_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954633, "uuid": "5fad995b-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://reutilizemais.co.mz/sehhs_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954633, "uuid": "5fbb7ba7-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://prosingle.com.br/my_photo.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954637, "uuid": "61da1b99-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954640, "uuid": "6417ac54-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.217.209.98/logfile.pdf", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954642, "uuid": "65632308-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://inmbau.com/upload/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954643, "uuid": "656e2fcb-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ia600708.us.archive.org/14/items/optimized_msi_20260324/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954645, "uuid": "669c285f-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://hostphpwindowsappsconect.ydns.eu:8011/data/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954645, "uuid": "670f9847-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://deposit-notification.com/Crypt/optimized_MSI.png", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954693, "uuid": "837523e3-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954757, "uuid": "a9e131cf-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.64/spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774954811, "uuid": "c9ce3367-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://11szohw.beltfloor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955111, "uuid": "7c7317bd-2cf1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cqnvpcp.beltfloor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955179, "uuid": "a4f34aa0-2cf1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.203.149:51381/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955225, "uuid": "c0d8bfa5-2cf1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.168.69.118/run.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955227, "uuid": "c19c2562-2cf1-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.223.1.224:41751/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955469, "uuid": "520f67fb-2cf2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ahus.beltfloor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955539, "uuid": "7bda12af-2cf2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.162.228.112:53422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955540, "uuid": "7c84d037-2cf2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.240.50:54543/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955711, "uuid": "e27e5a06-2cf2-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.239.111:35582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955829, "uuid": "28e34a34-2cf3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://xehramf.batkascript.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774955837, "uuid": "2d4a2409-2cf3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/cat.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774956131, "uuid": "dc9e63b4-2cf3-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://summitgeyser.batkascript.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774956370, "uuid": "6b1cdc52-2cf4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.203.149:51381/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774956552, "uuid": "d7a9e156-2cf4-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://canyonfresh.batkascript.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774956727, "uuid": "3fd6d3cd-2cf5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.48.41:59514/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774956790, "uuid": "651cd8e5-2cf5-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://btkrpap.batkascript.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "3be03526-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.74/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "3be580e6-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.74/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "3be59d20-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.74/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957150, "uuid": "3c1d5684-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.74/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957151, "uuid": "3c4a08bc-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://clusterclinic.batkascript.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957151, "uuid": "3c5e433a-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.26.226.210:56557/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957155, "uuid": "3eaf8666-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.74/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957156, "uuid": "3f86ff96-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.37.212.67:43258/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957209, "uuid": "5f65638b-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.162.228.112:53422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957451, "uuid": "ef59240a-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://g38198.batkascript.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957689, "uuid": "7d821030-2cf7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.146.92.46:51853/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774957870, "uuid": "e94c18b3-2cf7-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://alt-h0llow.premiumtos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958175, "uuid": "9ec6a5cd-2cf8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://epkzg.premiumtos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958252, "uuid": "ccd101e3-2cf8-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.146.92.46:51853/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958472, "uuid": "4fc1dafc-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://imagedis.premiumtos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "96cd50aa-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "96d02652-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "96dbde21-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "96dbde5b-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "96dbdf4b-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958591, "uuid": "96ef500f-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958657, "uuid": "be74850d-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.74/sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "bf53b154-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "bf5ba84c-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "bf646b35-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "bf647232-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "bf648155-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "bf648aff-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.74/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "bf648beb-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.25/html/jade.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958659, "uuid": "bf6ed855-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.74/wget.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958889, "uuid": "48ca556b-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pu1s-trail.premiumtos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958946, "uuid": "6a37c1c5-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.217.89.192:44823/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774958957, "uuid": "70cee389-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://dingdong-1399351730.cos.ap-hongkong.myqcloud.com/glqchoiding.zip", "Tag": [ { "name": "shellcode", "colour": "#a76d1c", "exportable": true, "hide_tag": false }, { "name": "Win32/Malgent!MSR", "colour": "#4f9551", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959068, "uuid": "b2fe7d5e-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.81/hiddenbin/boatnet.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959133, "uuid": "d9e2ddb6-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://markpeak.premiumtos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "478f6d33-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "47929fb8-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "4792ed3e-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.99/mirai.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "47a9bc7d-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "47b58731-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959317, "uuid": "47b93b30-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "496d948e-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "4975c9c9-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "4977ee27-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "497a199b-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "497a3eac-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "497fb824-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "49818076-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "498b2afa-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959320, "uuid": "498b71a3-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959323, "uuid": "4b3e9e29-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959342, "uuid": "569c189e-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.179.168:46843/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "892517fd-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "89353549-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "89395185-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959427, "uuid": "894b8c2e-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "91b3e419-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.228.240.50:54543/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "91b8332e-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "91c3229d-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "91c5e4cf-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "91c605f7-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959441, "uuid": "91c60ae9-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959442, "uuid": "91d7482d-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959442, "uuid": "91d75f86-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959442, "uuid": "91d76a97-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959489, "uuid": "ae1c4520-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959489, "uuid": "ae1cd7bd-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959490, "uuid": "aee781da-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-cu1tur.premiumtos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ecfc8c5-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ed13d26-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.armv5l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ed15d34-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.armv6l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ed316bc-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/ohshit.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1edaf28f-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1edda576-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ee2186e-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ee21872-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ee3ad63-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ee3b627-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.powerpc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ee43433-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ee5d2a1-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959678, "uuid": "1ef27baf-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959739, "uuid": "432b20e2-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.armv7l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959739, "uuid": "43669be4-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "d1c11432-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.57/bins/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "d1c9c19d-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.57/bins/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "d1c9c26b-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.57/bins/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774959978, "uuid": "d1d7f4d0-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.57/bins/arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960031, "uuid": "f12e4d86-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.57/bins/mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960031, "uuid": "f12e4fe6-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.57/bins/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960031, "uuid": "f12e5bd2-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.57/bins/arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960093, "uuid": "162824a8-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://b4nn-mount.manchustill.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960145, "uuid": "35411e0d-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.234.181.102:48400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960226, "uuid": "659ffd30-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.44/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960265, "uuid": "7c5f7879-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.44/nigger.go", "Tag": [ { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960269, "uuid": "7f1758db-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vxfxox7r.manchustill.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960448, "uuid": "e9a300d2-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.apk", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960448, "uuid": "e9b7e249-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.203/manji.dbg", "Tag": [ { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960456, "uuid": "eeaa30b7-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://targettest.manchustill.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774960511, "uuid": "0f94d138-2cfe-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.14.212:45600/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774961111, "uuid": "74ae288c-2cff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://veobw.manchustill.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774961238, "uuid": "c099ad92-2cff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.61.157.176:55679/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774961290, "uuid": "dfa8497f-2cff-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://tokcheck.manchustill.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774961532, "uuid": "6fe3d573-2d00-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zennex8ar.manchustill.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774961892, "uuid": "4625562f-2d01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://lumnexum1.prefixwag.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962127, "uuid": "d256fb94-2d01-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.48.41:59514/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962255, "uuid": "1e862db6-2d02-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://zenvaleex.prefixwag.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962375, "uuid": "6679a311-2d02-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.14.212:45600/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962487, "uuid": "a939686a-2d02-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/ashduasdoasdoasd/localhostc2/raw/refs/heads/main/realc2/hi-malwareresearcher/RuntimeBroker.exe", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962487, "uuid": "a93ca6f6-2d02-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://raw.githubusercontent.com/ashduasdoasdoasd/localhostc2/refs/heads/main/realc2/hi-malwareresearcher/RuntimeBroker.exe", "Tag": [ { "name": "AdaptixC2", "colour": "#BD7352", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962847, "uuid": "7f8930bb-2d03-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://csbtxwz.prefixwag.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774962970, "uuid": "c8d2ecb7-2d03-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://4csbzg.prefixwag.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963185, "uuid": "4928462d-2d04-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://ledge5-switch.prefixwag.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963546, "uuid": "200f3980-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.41:59422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963587, "uuid": "38e771dc-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://py28ionr.prefixwag.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963703, "uuid": "7de62554-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963703, "uuid": "7de63b7d-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.96/hiddenbin/boatnet.i468", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e62e5bc-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e9946eb-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e996379-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e998243-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e9a25a7-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e9a95c8-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e9b3cd5-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_mips64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e9b6995-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e9b9ebc-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e9bc824-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963704, "uuid": "7e9bca47-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963705, "uuid": "7f393335-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963705, "uuid": "7f49b275-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963707, "uuid": "800a5206-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.232.64.184:54840/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963707, "uuid": "800a6459-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.armv4l", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963707, "uuid": "800a785f-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.aarch64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963714, "uuid": "84420d1c-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://121.37.40.52/main_mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963754, "uuid": "9c8e12fc-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.59/hiddenbin/boatnet.mipsrouter", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963886, "uuid": "eb0b9e76-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://c0nvoy5-field.codcomparable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774963945, "uuid": "0deaa6e8-2d06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.38.88:59792/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774964185, "uuid": "9d4fe6cb-2d06-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://sp0o-forge.codcomparable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774964360, "uuid": "05926758-2d07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.211.208.123:38032/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774964435, "uuid": "326e8663-2d07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.40.84:32883/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774964543, "uuid": "72a0bad2-2d07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://theor-spool.codcomparable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774964664, "uuid": "bab9f330-2d07-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.95.41:59422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774964851, "uuid": "2a6b3aef-2d08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://j30k.codcomparable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774965180, "uuid": "ee842000-2d08-11f1-ba1a-82aee05be84a", "comment": "Malware distribution site", "value": "https://gentle5-crest.codcomparable.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774965674, "uuid": "14e04d24-2d0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.45.187:53599/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774965921, "uuid": "a7aab6c1-2d0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scarlet-tra.cuffsorbsky.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774965972, "uuid": "c638c088-2d0a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.128:52610/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966158, "uuid": "34e27a1b-2d0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:36919/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966224, "uuid": "5c9b435d-2d0b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://yfjgi.cuffsorbsky.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966574, "uuid": "2d19904a-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bundstar.cuffsorbsky.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966766, "uuid": "9f54128c-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.216.175:44977/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966868, "uuid": "dc72c75d-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.91/g8hrS4f4vh/Plugins/vnc.exe", "Tag": [ { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966869, "uuid": "dd045320-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.91/g8hrS4f4vh/Plugins/cred.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966869, "uuid": "dd0f9090-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://158.94.210.91/g8hrS4f4vh/Plugins/cred64.dll", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966929, "uuid": "009a6927-2d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:43689/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774966931, "uuid": "01a29197-2d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://st4b1l-span.cuffsorbsky.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774967291, "uuid": "d8730874-2d0d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://loosesnow.cuffsorbsky.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774967529, "uuid": "66a17201-2d0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.189.96.59:43689/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774967542, "uuid": "6e61400c-2d0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://rne4d7-zone.cuffsorbsky.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774967660, "uuid": "b4b01918-2d0e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.48:52572/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774967903, "uuid": "45097508-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://honestsort.paleontraglan.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774967956, "uuid": "64ed1e84-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.120:36919/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774967963, "uuid": "68cbf155-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://190.55.14.216:38506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774968137, "uuid": "d08478b4-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.189.111:52003/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774968141, "uuid": "d358b687-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.183.105:49437/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774968201, "uuid": "f6c2a061-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.112.12:38148/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774968252, "uuid": "1563dec4-2d10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://voicefjo.paleontraglan.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774968563, "uuid": "ceadc67c-2d10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.231.110.202:57990/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774968617, "uuid": "eec1f93a-2d10-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kvvfusu.chernomofnothes.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774968973, "uuid": "c2e58663-2d11-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://load-spark.chernomofnothes.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969273, "uuid": "75aad0f0-2d12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mer-lithen.radiatebeef.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969326, "uuid": "9592e9e0-2d12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.83.28:32913/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969338, "uuid": "9c832ab5-2d12-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.23.236.40:60789/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969571, "uuid": "278c37fe-2d13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://lum-markal.radiatebeef.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969761, "uuid": "98ce4612-2d13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.189.111:52003/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969762, "uuid": "99574f19-2d13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.182.107:38745/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969881, "uuid": "e07a2c14-2d13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.112.12:38148/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774969932, "uuid": "fe680f9d-2d13-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://value9-mesh.beltfloor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970195, "uuid": "9b209e1f-2d14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.180.183.105:49437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970237, "uuid": "b4327a2e-2d14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://partnerrelay.beltfloor.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970248, "uuid": "bb32319c-2d14-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.182.122:44856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970596, "uuid": "8a70c999-2d15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://xxhq.batkascript.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970787, "uuid": "fc6e694b-2d15-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.177.208:35249/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970795, "uuid": "010dc7c1-2d16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.23.214:33668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970828, "uuid": "14abd0f9-2d16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.74.83.28:32913/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774970955, "uuid": "603628ee-2d16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cata1og-forge.batkascript.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971026, "uuid": "8aecf2fb-2d16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.182.107:38745/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971026, "uuid": "8aff9fbc-2d16-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.186.172.191:42231/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971252, "uuid": "119d98e9-2d17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vaulvoc.premiumtos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971325, "uuid": "3d272416-2d17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.52.64:39726/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971551, "uuid": "c3636922-2d17-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://formalpod.premiumtos.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971926, "uuid": "a2ea1be0-2d18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.222.144.108:49582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971970, "uuid": "bd8dc118-2d18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://qz65lmfc.manchustill.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774971980, "uuid": "c398167a-2d18-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.180.248.192:51461/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972226, "uuid": "56433bd6-2d19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.182.122:44856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972274, "uuid": "72598aaf-2d19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vgtp5o.manchustill.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972343, "uuid": "9c01579b-2d19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.127.234:38071/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972461, "uuid": "e1e1ba50-2d19-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://106.58.23.214:33668/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972573, "uuid": "24f04791-2d1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://devsig.prefixwag.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972646, "uuid": "50937a80-2d1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.222.144.108:49582/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972705, "uuid": "73a6b762-2d1a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.208.145.10:33976/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774972992, "uuid": "1e6c4841-2d1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://vale-gra.prefixwag.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774973060, "uuid": "4721100f-2d1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.180.160:55488/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774973228, "uuid": "ab5f1f57-2d1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.52.64:39726/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774973352, "uuid": "f4da760b-2d1b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://peak-point.vertexbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774973484, "uuid": "43c21672-2d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://38.226.161.94:36049/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774973590, "uuid": "833a0c0d-2d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://growth-engine.vertexbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774973722, "uuid": "d1644aad-2d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.252.179.168:46843/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774973783, "uuid": "f61d6029-2d1c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.208.26:42784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774973951, "uuid": "5a253cef-2d1d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://render-farm.vertexbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774974251, "uuid": "0d2dddaa-2d1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spatial-api.vertexbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774974437, "uuid": "7bef517c-2d1e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://217.208.145.10:33976/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774974916, "uuid": "9914d114-2d1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://top-level.vertexbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774975042, "uuid": "e4906c44-2d1f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.90.92:34637/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774975093, "uuid": "032123a6-2d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://polygon-svc.vertexbloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774975332, "uuid": "9127c3d6-2d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-build.novaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774975462, "uuid": "decb29ad-2d20-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.208.26:42784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774975522, "uuid": "02a020bb-2d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.180.160:55488/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774975630, "uuid": "42ff57e8-2d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://220.192.1.252:40811/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774975692, "uuid": "681111ea-2d21-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://fusion-core.novaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976054, "uuid": "3feedd3e-2d22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://heavy-metal.novaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976180, "uuid": "8afafcdf-2d22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.236.58:59893/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976290, "uuid": "cc6a2530-2d22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://blast-zone.novaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976356, "uuid": "f382c975-2d22-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.11.123:34666/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976529, "uuid": "5a91147b-2d23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.103.199:44175/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976652, "uuid": "a452e41e-2d23-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://plasma-node.novaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774976951, "uuid": "56749aaf-2d24-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://smelt-logic.novaforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774977376, "uuid": "53db4309-2d25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bright-beam.luminflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774977441, "uuid": "7a45be65-2d25-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.98.97.191:34651/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774977673, "uuid": "046d87a9-2d26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wave-length.luminflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774977682, "uuid": "0a405e1c-2d26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.94.101.41:55090/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774977920, "uuid": "979020dc-2d26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.11.123:34666/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774978030, "uuid": "d9899df3-2d26-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.98.97.191:34651/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774978274, "uuid": "6b22a986-2d27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://optic-hub.luminflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774978281, "uuid": "6f1693e0-2d27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.254.165:41922/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774978395, "uuid": "b2c97686-2d27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.9.90.92:34637/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774978517, "uuid": "fbd8f87e-2d27-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://photo-sync.luminflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774978692, "uuid": "63d11fc3-2d28-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://light-trace.luminflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774978991, "uuid": "15f61bb3-2d29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://glow-portal.luminflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774979228, "uuid": "a353a36f-2d29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.223.111:34621/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774979350, "uuid": "ec7cb76c-2d29-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://path-finder.orbitforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774979651, "uuid": "9fc1df39-2d2a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cycle-monitor.orbitforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774979960, "uuid": "57ffd9c9-2d2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.231.163.114:43927/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774980014, "uuid": "780833ba-2d2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://round-trip.orbitforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774980127, "uuid": "bb277de4-2d2b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.11:50656/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774980371, "uuid": "4cad27af-2d2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://spin-control.orbitforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774980669, "uuid": "fe7ce837-2d2c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://gravity-io.orbitforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774980799, "uuid": "4ba9e063-2d2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.167.175.121:53667/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774980909, "uuid": "8d75bfc2-2d2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://kryptonmc.lovable.app/krypton-1.21.11.jar", "Tag": [ { "name": "jar", "colour": "#4bee00", "exportable": true, "hide_tag": false }, { "name": "WeedHack", "colour": "#a08569", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774981033, "uuid": "d70f7fa8-2d2d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://launch-pad.orbitforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774981399, "uuid": "b1c9c7a6-2d2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://safe-ship.astrahaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774981401, "uuid": "b2f8973d-2d2e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://122.231.163.114:43927/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774981627, "uuid": "3983c8df-2d2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.221.11:50656/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774981692, "uuid": "60249f59-2d2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://deep-sky.astrahaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774981760, "uuid": "889d4842-2d2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.117.225:49671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774981822, "uuid": "ad682bbb-2d2f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.231.19:53077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774982055, "uuid": "38767dc8-2d30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://star-map.astrahaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774982110, "uuid": "59301cb2-2d30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.163.187.211:55199/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774982240, "uuid": "a68974d9-2d30-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.55.23:40200/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774982485, "uuid": "38ea6fa9-2d31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.125.217:36422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774982527, "uuid": "5224ae78-2d31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.223.111:34621/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774982652, "uuid": "9ca023c0-2d31-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://cosmic-link.astrahaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774982830, "uuid": "063b552d-2d32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://void-storage.astrahaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774982960, "uuid": "53e86604-2d32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.167.175.121:53667/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774983013, "uuid": "738b23da-2d32-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pilot-auth.astrahaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774983376, "uuid": "4bf2d9fd-2d33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://micro-pulse.quantaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774983428, "uuid": "6b0a2f4f-2d33-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.254.164.206:43117/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774983727, "uuid": "1d1eaf1f-2d34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:54919/bin.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774983730, "uuid": "1f128fdb-2d34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://atom-split.quantaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774984089, "uuid": "f49ba62e-2d34-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-gate.quantaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774984222, "uuid": "44536d69-2d35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.51.251:44710/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774984449, "uuid": "cb90aef8-2d35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://speed-test.quantaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774984514, "uuid": "f2476907-2d35-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.238.68.233:44121/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774984640, "uuid": "3d0042e9-2d36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.231.19:53077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774984749, "uuid": "7e485b5d-2d36-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://packet-flow.quantaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774985052, "uuid": "32b48ba1-2d37-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bit-stream.quantaflux.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774985470, "uuid": "2c11a49a-2d38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://synapse-net.neurobloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774985771, "uuid": "df72d072-2d38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://brain-scan.neurobloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774985772, "uuid": "dfb8c823-2d38-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.241.51.251:44710/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774985827, "uuid": "00910a64-2d39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://36.64.184.26:54919/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774985839, "uuid": "07d5956e-2d39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.159.32:36989/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774986130, "uuid": "b5520d78-2d39-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://thought-api.neurobloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774986568, "uuid": "ba961526-2d3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.169:39415/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774986671, "uuid": "f79ed158-2d3a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://nerve-center.neurobloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774986852, "uuid": "63e0f036-2d3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://pulse-logic.neurobloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774986988, "uuid": "b4a88918-2d3b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.18.169:39415/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774987149, "uuid": "148df705-2d3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bio-sensor.neurobloom.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774987445, "uuid": "c53b028b-2d3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/7359455182/wugQXVn.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774987451, "uuid": "c8d216f2-2d3c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ghost-shell.cyberhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774987576, "uuid": "1316e819-2d3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.136.159.32:36989/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774987752, "uuid": "7c2d1ec4-2d3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://mesh-proxy.cyberhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774987877, "uuid": "c6c317a4-2d3d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.227.117:59511/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988019, "uuid": "1b729f07-2d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.118.66:34574/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988111, "uuid": "5202e545-2d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://threat-log.cyberhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988298, "uuid": "c18bbf20-2d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.32.199.244:50607/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988349, "uuid": "e01533b7-2d3e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.167.171:34161/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988470, "uuid": "284e14d6-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://secure-vault.cyberhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "6dac839a-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/6.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "6dac95da-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/1.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "6db3c778-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/3.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "6db51c45-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/4.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "6db689d3-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/5.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988587, "uuid": "6dbf4bfa-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.16.54.109/2.exe", "Tag": [ { "name": "dropped-by-Phorpiex", "colour": "#5b88bc", "exportable": true, "hide_tag": false }, { "name": "phorpiex", "colour": "#16a28b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988772, "uuid": "dc3cc554-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://anon-relay.cyberhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988840, "uuid": "04f4f5c0-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:42707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988887, "uuid": "209a5c52-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "25b25672-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/sparc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "25b262f1-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "25b27378-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/mipsel", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988895, "uuid": "25b923c8-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "4b7e4be5-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "4b840a10-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "4b8466fd-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774988959, "uuid": "4b8683d5-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://92.112.124.72/arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774989070, "uuid": "8e0fdf7a-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://enc-tunnel.cyberhaven.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774989259, "uuid": "fe84f786-2d40-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.85.229:37143/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774989490, "uuid": "8846a2ad-2d41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://high-ridge.datacrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774989669, "uuid": "f28ab93d-2d41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://114.228.132.87:39486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774989669, "uuid": "f2e4613a-2d41-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.22:53549/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774989731, "uuid": "17ba5964-2d42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://archive-top.datacrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774989918, "uuid": "87834e41-2d42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.32.199.244:50607/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990091, "uuid": "ee1f325d-2d42-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bulk-export.datacrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990286, "uuid": "62cd3ed8-2d43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.89.45:38805/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990339, "uuid": "82258feb-2d43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.0.60.80:44609/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990449, "uuid": "c3f02e4f-2d43-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://info-summit.datacrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990576, "uuid": "0f6f69f2-2d44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.28.199.24:42707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990746, "uuid": "74c396ac-2d44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://base-record.datacrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990812, "uuid": "9c3c69d3-2d44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.85.229:37143/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990812, "uuid": "9c55e079-2d44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.167.171:34161/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990928, "uuid": "e0f2e077-2d44-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.225.230:34570/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990998, "uuid": "0afbc158-2d45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.204.153:40746/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774990999, "uuid": "0b6ae37b-2d45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.180.84:56872/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774991167, "uuid": "6f9550e5-2d45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://meta-stack.datacrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774991168, "uuid": "7045dec9-2d45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.220.151.22:53549/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774991285, "uuid": "b5f8057a-2d45-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/6560547276/ZAZsFyd.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774991469, "uuid": "23a64f2a-2d46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wave-crest.signalcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774991527, "uuid": "4687253f-2d46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.254.81:54558/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774991828, "uuid": "f99b402c-2d46-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://radio-freq.signalcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774991949, "uuid": "418c1c59-2d47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.204.153:40746/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774991949, "uuid": "419ecb7a-2d47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.122.242:42407/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992022, "uuid": "6d0885a3-2d47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.122.242:42407/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992128, "uuid": "ac64dbcd-2d47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://170.0.60.80:44609/i", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992193, "uuid": "d34d4f92-2d47-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tower-sync.signalcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992382, "uuid": "439fbbf6-2d48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.1:39124/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992489, "uuid": "83a1d68b-2d48-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://range-extend.signalcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774992848, "uuid": "59eef450-2d49-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://broad-cast.signalcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774993147, "uuid": "0bee73f9-2d4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ping-gate.signalcrest.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774993281, "uuid": "5bde04f0-2d4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.37.240:59785/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774993519, "uuid": "e9aecc63-2d4a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.15.1:39124/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774993820, "uuid": "9d2d1a23-2d4b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.201.18:37596/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774994304, "uuid": "bd95cfa5-2d4c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.72.176:45617/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774994534, "uuid": "466cc8d6-2d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://micro-scale.nanovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774994660, "uuid": "91a7db71-2d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.80.162:43865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774994667, "uuid": "961ed479-2d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.170.117:38526/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774994768, "uuid": "d240a075-2d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://atom-trace.nanovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774994833, "uuid": "f88774ca-2d4d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://105.225.37.240:59785/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774994900, "uuid": "20ab19bc-2d4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.179.235.229:59423/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774995187, "uuid": "cbfcfc93-2d4e-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://precision-io.nanovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774995429, "uuid": "5bd77fef-2d4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.245.102:59322/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774995489, "uuid": "7feb6b96-2d4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://small-unit.nanovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774995504, "uuid": "88f4c8de-2d4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.201.18:37596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774995606, "uuid": "c5cec564-2d4f-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.239.147.6/files/8405865752/5EYH7vF.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774995852, "uuid": "581a3657-2d50-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://particle-api.nanovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774996210, "uuid": "2d8ddb33-2d51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://scan-core.nanovector.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774996279, "uuid": "5675ff6b-2d51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.115.168.240:63702/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774996451, "uuid": "bcfc077a-2d51-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://color-bit.pixelmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774996582, "uuid": "0b46ddc4-2d52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.26.169:60250/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774996701, "uuid": "51eb1d2d-2d52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.248.176:38579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774996874, "uuid": "b96bc1ea-2d52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://render-grid.pixelmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774996890, "uuid": "c2eddda2-2d52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.159.114:56760/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774996926, "uuid": "d86d882a-2d52-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.39.213:48027/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774997111, "uuid": "466798e7-2d53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://image-stack.pixelmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774997228, "uuid": "8c9d23fb-2d53-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.44.245.102:59322/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774997477, "uuid": "208d1ca5-2d54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.26.169:60250/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774997530, "uuid": "40227260-2d54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://video-buffer.pixelmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774997651, "uuid": "884fd784-2d54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.169.33:36911/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774997778, "uuid": "d3dfa775-2d54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://188.115.168.240:63702/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774997828, "uuid": "f2259021-2d54-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://display-svc.pixelmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774998127, "uuid": "a4682d4c-2d55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.72.162:42234/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774998192, "uuid": "caef79f2-2d55-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://raster-node.pixelmatrix.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774998427, "uuid": "571aa55d-2d56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.78:52473/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774998428, "uuid": "57657815-2d56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.159.114:56760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774998429, "uuid": "5851e0e0-2d56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.186.121.103:51817/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774998488, "uuid": "7b25f9fd-2d56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://radio-freq.signalforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774998552, "uuid": "a1b4fe13-2d56-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.163:48626/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774998850, "uuid": "52ed2f37-2d57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wave-form.signalforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774999028, "uuid": "bcfc3bb4-2d57-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.39.213:48027/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774999215, "uuid": "2c627ddb-2d58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://beam-relay.signalforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774999329, "uuid": "70d85dc6-2d58-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.127.158:44774/bin.sh", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774999573, "uuid": "021e70e7-2d59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://tower-sync.signalforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774999811, "uuid": "8fe371a4-2d59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://ping-gate.signalforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774999927, "uuid": "d52f281b-2d59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.78:52473/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774999929, "uuid": "d5f5beb8-2d59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://191.210.133.134:42696/i", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1774999990, "uuid": "fa97b000-2d59-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://183.186.121.103:51817/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775000177, "uuid": "69e2c8f6-2d5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.233.163:48626/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775000230, "uuid": "89b5bb1a-2d5a-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.167.58:45651/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775000473, "uuid": "1a5a4df3-2d5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://broad-cast.signalforge.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775000479, "uuid": "1dd0d784-2d5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.177.236.151:49952/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775000649, "uuid": "83786135-2d5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://logic-gate.infocircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775000828, "uuid": "ee28c49f-2d5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.127.158:44774/i", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775000828, "uuid": "ee2e543a-2d5b-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://wire-sync.infocircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775000914, "uuid": "212235f0-2d5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.25.41:38187/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001127, "uuid": "a014dd99-2d5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.251.84:36535/bin.sh", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001187, "uuid": "c3f38325-2d5c-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://bus-bridge.infocircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001370, "uuid": "30da9913-2d5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.97.254.234:46513/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1775001548, "uuid": "9b74d560-2d5d-11f1-bc00-82aee05be84a", "comment": "Malware distribution site", "value": "https://volt-check.infocircuit.in.net/verification.google", "Tag": [ { "name": "ACRStealer", "colour": "#b8b691", "exportable": true, "hide_tag": false }, { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929064, "uuid": "d7b181fc-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.58.64.161", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774980785, "uuid": "43d2a3dc-2d2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.167.175.121", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774947307, "uuid": "5108ba3c-2cdf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.186.172.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774993264, "uuid": "51daf945-2d4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "105.225.37.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774970767, "uuid": "f08bc4fe-2d15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "106.58.23.214", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774952225, "uuid": "c4895d02-2cea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.136.33.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774986544, "uuid": "ac5e6aa3-2d3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.18.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774998546, "uuid": "9dc6ee76-2d56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.39.233.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774938846, "uuid": "9dbbab54-2ccb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.231.44.55", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959307, "uuid": "41996ea4-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.252.179.168", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774993806, "uuid": "94870490-2d4b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.201.18", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774977426, "uuid": "713a11a4-2d25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.98.97.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774971907, "uuid": "97e5e2f2-2d18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.222.144.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924205, "uuid": "87724a22-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.152.60", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774955525, "uuid": "735dab31-2cf2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.228.240.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774952108, "uuid": "7eafb476-2cea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.231.36.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774915744, "uuid": "d407870e-2c95-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.237.101.50", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960507, "uuid": "0d01d028-2cfe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.14.212", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929064, "uuid": "d7b3756d-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "114.228.132.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774933384, "uuid": "e699cec0-2cbe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.112.174", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968126, "uuid": "ca3b390d-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.189.111", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988345, "uuid": "dd61fd8f-2d3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.167.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775000225, "uuid": "86e402af-2d5a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.167.58", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774942865, "uuid": "f95d0f2d-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.254.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774990985, "uuid": "037c483b-2d45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.180.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940286, "uuid": "f7f8cc27-2cce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.25.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774937825, "uuid": "3dab0608-2cc9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.206.111.48", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774920784, "uuid": "90268dcf-2ca1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.18.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774935725, "uuid": "59f58bdc-2cc4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.209.9.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774936026, "uuid": "0cefc191-2cc5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.211.149.180", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948507, "uuid": "1c1486e4-2ce2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.56.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928407, "uuid": "4fa606c9-2cb3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.196.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774989665, "uuid": "f041ffe8-2d41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.220.151.22", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774953726, "uuid": "4300b0f4-2cee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.223.1.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774987865, "uuid": "bf579f1e-2d3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.227.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774965664, "uuid": "0ed1d235-2d0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.45.187", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774984205, "uuid": "3a378bba-2d35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.241.51.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957143, "uuid": "37ec55c0-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.26.226.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954806, "uuid": "c6f21ab8-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "11szohw.beltfloor.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954266, "uuid": "84b7b9a1-2cef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.37.212.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774961224, "uuid": "b84d1896-2cff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.61.157.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774979944, "uuid": "4e1ec5ba-2d2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "122.231.163.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940885, "uuid": "5d064d5e-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.238.198", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929064, "uuid": "d7b3c5f6-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.179.235.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929725, "uuid": "617de607-2cb6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.4.244.236", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774997646, "uuid": "8549eb97-2d54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.169.33", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774979225, "uuid": "a1dabb97-2d29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.223.111", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774975027, "uuid": "db715431-2d1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.9.90.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960086, "uuid": "11fb1696-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.234.181.102", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774981807, "uuid": "a469e27d-2d2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.94.231.19", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774945026, "uuid": "0190f734-2cda-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.86.211", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774921444, "uuid": "197fee46-2ca3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.42.33.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774995425, "uuid": "59d02cff-2d4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.245.102", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774991524, "uuid": "44b0482f-2d46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.44.254.81", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966866, "uuid": "db31d8a7-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "158.94.210.91", "Tag": [ { "name": "Amadey", "colour": "#6d0e79", "exportable": true, "hide_tag": false }, { "name": "tinynuke", "colour": "#6e0287", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774946765, "uuid": "0e418aa4-2cde-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "167.250.158.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774942206, "uuid": "70e34a0f-2cd3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.146.163.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774947843, "uuid": "90d95567-2ce0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.147.157.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929192, "uuid": "23f5a0bf-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.154.118.223", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959425, "uuid": "87ec7d46-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.203", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958585, "uuid": "934d55cc-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.25", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960207, "uuid": "5a0bd222-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.44", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959966, "uuid": "ca5d7351-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.57", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959666, "uuid": "17b9b79c-2cfc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.59", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957143, "uuid": "37ec216d-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.74", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959307, "uuid": "4198900b-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.96", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959307, "uuid": "41996f69-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.99", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963693, "uuid": "77d8398e-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.232.64.184", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940825, "uuid": "39732747-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "179.43.186.246", "Tag": [ { "name": "clearwater", "colour": "#6b4e95", "exportable": true, "hide_tag": false }, { "name": "Ransomware", "colour": "#9e80d3", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774937584, "uuid": "adef88e7-2cc8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "180.245.47.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969746, "uuid": "8fe78a91-2d13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.112.182.107", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929125, "uuid": "fbdc7bce-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.78.224", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774970228, "uuid": "aef7f09e-2d14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.182.122", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931946, "uuid": "8cf42dbc-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.119.228.241", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774917424, "uuid": "bd8b8822-2c99-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.117.162", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774989245, "uuid": "f61a1a1e-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.85.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929064, "uuid": "d7b30ca5-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.128.106", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774956724, "uuid": "3e00a27a-2cf5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.48.41", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988285, "uuid": "b9f10dee-2d3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.32.199.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774998426, "uuid": "56262e61-2d56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "183.186.121.103", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774996267, "uuid": "4fcccae4-2d51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "188.115.168.240", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774967945, "uuid": "5e8da3fe-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "190.55.14.216", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774999926, "uuid": "d435c7f1-2d59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "191.210.133.134", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954625, "uuid": "5ad1f457-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "198.12.83.76", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954625, "uuid": "5ad33be1-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.9.225.38", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934225, "uuid": "dbe50e12-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.160.125.125", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774972686, "uuid": "6851c7c0-2d1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "217.208.145.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774973767, "uuid": "ecb487e1-2d1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.208.26", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774996567, "uuid": "02493ccc-2d52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.26.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774975626, "uuid": "4044c7cf-2d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "220.192.1.252", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774938666, "uuid": "326b48d1-2ccb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "221.207.250.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774935907, "uuid": "c608d907-2cc4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.134.163.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774985825, "uuid": "ff719f59-2d38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.136.159.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774972325, "uuid": "910d85f2-2d19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.127.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774978267, "uuid": "66b9416e-2d27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.254.165", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929125, "uuid": "fbdcf195-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.156.176.206", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774944908, "uuid": "bb0eb25a-2cd9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.176.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958945, "uuid": "69c2bc9b-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.217.89.192", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976526, "uuid": "5910587a-2d23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.103.199", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774915985, "uuid": "63892bc6-2c96-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.63.74", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774926185, "uuid": "237124e5-2cae-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "36.88.136.194", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774973466, "uuid": "3947d5a0-2d1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "38.226.161.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969324, "uuid": "9403df79-2d12-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.74.83.28", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966747, "uuid": "941a6e65-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.216.175", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775000465, "uuid": "15f69542-2d5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.177.236.151", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774971965, "uuid": "ba7e8589-2d18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.180.248.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774950365, "uuid": "6f985584-2ce6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.67.171", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774982465, "uuid": "2cde5436-2d31-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.125.217", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774950365, "uuid": "6f987832-2ce6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.32.152", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968547, "uuid": "c4ed5802-2d10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.231.110.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929064, "uuid": "d7b16eb3-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.77.150", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929125, "uuid": "fbdd4cb7-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.238.68.233", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929125, "uuid": "fbdc4deb-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.166.90", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976345, "uuid": "ecf647e2-2d22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.11.123", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929064, "uuid": "d7b1d986-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.57.180.81", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774950126, "uuid": "e188234d-2ce5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.253.116", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929125, "uuid": "fbdccd2b-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.237.130.120", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962952, "uuid": "be585fba-2d03-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "4csbzg.prefixwag.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927926, "uuid": "3108590c-2cb2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.46.51", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968126, "uuid": "ca3b3590-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.180.183.105", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774943464, "uuid": "5eb21d0e-2cd6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.182.145.59", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774947307, "uuid": "5108bcf2-2cdf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.131.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774939626, "uuid": "6ed6f9f8-2ccd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.133.31", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929125, "uuid": "fbdce7c3-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.89.72.198", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929064, "uuid": "d7b18626-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.92.68.67", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774977667, "uuid": "00fc35a3-2d26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.94.101.41", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774970767, "uuid": "f08b2c61-2d15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.177.208", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774996686, "uuid": "48f90165-2d52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.248.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1775001365, "uuid": "2e6439a6-2d5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.97.254.234", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774952108, "uuid": "7ebca122-2cea-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "5ucnd.radiatebeef.in.net" }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948507, "uuid": "1c12f3ac-2ce2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.50.197", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774939445, "uuid": "02afd95f-2ccd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.213.123.169", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774942806, "uuid": "d64f7e28-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.176.44", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774955165, "uuid": "9cc74527-2cf1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.23.203.149", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948385, "uuid": "d3862eed-2ce1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.166.217.21", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774999327, "uuid": "6f4db79a-2d58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.127.158", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774996869, "uuid": "b69e3d9b-2d52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.53.159.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774917424, "uuid": "bd8b8ab0-2c99-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "81.230.148.181", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954625, "uuid": "5ad0ac84-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.217.209.98", "Tag": [] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774983425, "uuid": "6929a8d3-2d33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.254.164.206", "Tag": [ { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988884, "uuid": "1f2241fc-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "92.112.124.72", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927926, "uuid": "311807d3-2cb2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "agent-proxy.catalyticprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774955464, "uuid": "4f4e459a-2cf2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ahus.beltfloor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774944426, "uuid": "9bdb940b-2cd8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alloy-forge.metallurgiclink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774941786, "uuid": "763157cd-2cd2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alpha-gate.isotopecleaner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957865, "uuid": "e65aad76-2cf7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "alt-h0llow.premiumtos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774917545, "uuid": "0566b311-2c9a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "amp-control.circuitflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988766, "uuid": "d84cf4c2-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "anon-relay.cyberhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774989724, "uuid": "13b1eb98-2d42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "archive-top.datacrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928284, "uuid": "0694675b-2cb3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "atom-lattice.molecularbonding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774983725, "uuid": "1bf090b4-2d34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "atom-split.quantaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774994765, "uuid": "d0098c28-2d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "atom-trace.nanovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960088, "uuid": "134ccc65-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "b4nn-mount.manchustill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774949345, "uuid": "0ff3546a-2ce4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "basaltextend.chernomofnothes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774938426, "uuid": "a3675b76-2cca-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-level.alkalineelement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774990744, "uuid": "736b7e53-2d44-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "base-record.datacrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927625, "uuid": "7da2a1f0-2cb1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "batch-report.catalyticprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774942145, "uuid": "4c7b49cd-2cd3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "beam-portal.isotopecleaner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774999207, "uuid": "27dbe27b-2d58-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "beam-relay.signalforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774987145, "uuid": "12383e46-2d3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bio-sensor.neurobloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774985047, "uuid": "2ff79102-2d37-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bit-stream.quantaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774945446, "uuid": "fc02f538-2cda-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "blast-svc.metallurgiclink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976285, "uuid": "c9938d25-2d22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "blast-zone.novaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934107, "uuid": "951fac35-2cc0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "blend-master.syntheticpolymer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774985766, "uuid": "dc250980-2d38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "brain-scan.neurobloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774936384, "uuid": "e278f9fa-2cc5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "brick-layer.refractorymatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774977369, "uuid": "4fa44fb3-2d25-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-beam.luminflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774921566, "uuid": "61f64fa7-2ca3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bright-edge.helioshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992845, "uuid": "579c1d80-2d49-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "broad-cast.signalcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775000470, "uuid": "1892ce19-2d5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "broad-cast.signalforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774956785, "uuid": "6294b0dc-2cf5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "btkrpap.batkascript.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774990085, "uuid": "eaff384d-2d42-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bulk-export.datacrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966566, "uuid": "28113d6f-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bundstar.cuffsorbsky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774917906, "uuid": "dc965538-2c9a-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "bus-bridge.circuitflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775001185, "uuid": "c2ace861-2d5c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "bus-bridge.infocircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963874, "uuid": "e3f533db-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "c0nvoy5-field.codcomparable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774956546, "uuid": "d3f8ce0a-2cf4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "canyonfresh.batkascript.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774953307, "uuid": "49980754-2ced-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "carg-man.radiatebeef.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774945807, "uuid": "d2e3ebe9-2cdb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cast-iron.metallurgiclink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774970949, "uuid": "5cde41be-2d16-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cata1og-forge.batkascript.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774939387, "uuid": "e0ad8be3-2ccc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "caustic-api.alkalineelement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774928645, "uuid": "ddd17e87-2cb3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "chain-logic.molecularbonding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774944064, "uuid": "c45d0dae-2cd7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "chilled-link.cryogenicbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957143, "uuid": "37f94ba2-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "clusterclinic.batkascript.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930985, "uuid": "5035dd5e-2cb9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-bridge.isothermalmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774919645, "uuid": "e8fdfc80-2c9e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cold-store.polarisbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774996446, "uuid": "ba6b1d39-2d51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "color-bit.pixelmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930685, "uuid": "9d6c3ba6-2cb8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "constant-io.isothermalmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774982646, "uuid": "98825565-2d31-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cosmic-link.astrahaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929006, "uuid": "b4ae6b0a-2cb4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "covalent-hub.molecularbonding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774955106, "uuid": "79b3fb68-2cf1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "cqnvpcp.beltfloor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774951326, "uuid": "ac99f336-2ce8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "crawlerstor.radiatebeef.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962824, "uuid": "71cc11b0-2d03-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "csbtxwz.prefixwag.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774979645, "uuid": "9c4b05ef-2d2a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "cycle-monitor.orbitforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774953785, "uuid": "662f01de-2cee-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "d3nse-gate.beltfloor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925586, "uuid": "be2f81c9-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dark-matter.cosmoforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774921328, "uuid": "d429ee68-2ca2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "day-light.helioshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774941125, "uuid": "ec982807-2cd0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "decay-check.isotopecleaner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948986, "uuid": "39c22ccf-2ce3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "decode-frame.chernomofnothes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774942447, "uuid": "0028dd8e-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-freeze.cryogenicbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774981688, "uuid": "5dcfbc6f-2d2f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-sky.astrahaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924265, "uuid": "aad23823-2ca9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "deep-space.cosmoforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774935965, "uuid": "e8efa746-2cc4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "density-svc.viscositycontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954629, "uuid": "5d91800d-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "deposit-notification.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774972568, "uuid": "21aca1b3-2d1a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "devsig.prefixwag.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954625, "uuid": "5af1dae5-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "digitalauralab.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958946, "uuid": "6ab80df0-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dingdong-1399351730.cos.ap-hongkong.myqcloud.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774997826, "uuid": "f0c01a9b-2d54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "display-svc.pixelmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774947785, "uuid": "6ddaa92e-2ce0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "dyn-valeal.paleontraglan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774933685, "uuid": "99a94f81-2cbf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "elastic-net.syntheticpolymer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774989064, "uuid": "8a627b5e-2d40-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "enc-tunnel.cyberhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958168, "uuid": "9a8f7b18-2cf8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "epkzg.premiumtos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954085, "uuid": "1948adfd-2cef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "f4br2-scope.beltfloor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774923965, "uuid": "f8325f2a-2ca8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fast-trace.dynaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932665, "uuid": "39d4b7b1-2cbd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fiber-optic.syntheticpolymer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774927325, "uuid": "cb24d7ba-2cb0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "filter-press.catalyticprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774938066, "uuid": "cd02609d-2cc9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fire-wall.refractorymatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774935065, "uuid": "d089f5fe-2cc2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "flow-regulator.viscositycontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934346, "uuid": "238d1193-2cc1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fluid-path.viscositycontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930025, "uuid": "13f36c34-2cb7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "force-field.molecularbonding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774971546, "uuid": "c0a33973-2d17-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "formalpod.premiumtos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774935425, "uuid": "a6ff1498-2cc3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "friction-log.viscositycontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774943464, "uuid": "5ebb4565-2cd6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "frost-node.cryogenicbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954625, "uuid": "5aea35af-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "fullclear-seven.vercel.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774975686, "uuid": "6461a033-2d21-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "fusion-core.novaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774957446, "uuid": "ec286bbd-2cf6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "g38198.batkascript.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774944245, "uuid": "30209c3a-2cd8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gas-storage.cryogenicbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774965168, "uuid": "e7200f8a-2d08-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gentle5-crest.codcomparable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774987447, "uuid": "c64d8867-2d3c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ghost-shell.cyberhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774978986, "uuid": "1303467c-2d29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "glow-portal.luminflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774950128, "uuid": "e2c47269-2ce5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "gr0v-hold.chernomofnothes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774980664, "uuid": "fb5c7029-2d2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "gravity-io.orbitforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774973586, "uuid": "80605fc7-2d1c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "growth-engine.vertexbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774918628, "uuid": "8af44a88-2c9c-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "guide-path.polarisbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940410, "uuid": "41f40425-2ccf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "half-life.isotopecleaner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774947365, "uuid": "73cd8f1b-2cdf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hardexte.paleontraglan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774930325, "uuid": "c752c6c0-2cb7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "heat-sensor.isothermalmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774920609, "uuid": "27c59c85-2ca1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "heat-shield.helioshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976047, "uuid": "3b75387d-2d22-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "heavy-metal.novaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774937106, "uuid": "90ed8a92-2cc7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-heat.refractorymatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774989485, "uuid": "853259aa-2d41-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "high-ridge.datacrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774967892, "uuid": "3ea272a0-2d0f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "honestsort.paleontraglan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954629, "uuid": "5d91c77c-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hostphpwindowsappsconect.ydns.eu" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774920006, "uuid": "c07f454f-2c9f-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ice-vault.polarisbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774997108, "uuid": "44a2bd51-2d53-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "image-stack.pixelmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958467, "uuid": "4d20e9c8-2cf9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "imagedis.premiumtos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774990447, "uuid": "c2402eb8-2d43-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "info-summit.datacrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929307, "uuid": "67f63618-2cb5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ion-channel.molecularbonding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774964842, "uuid": "24f58380-2d08-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "j30k.codcomparable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774936685, "uuid": "95b7dbc3-2cc6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kiln-control.refractorymatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774922585, "uuid": "c1e377a8-2ca5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "kinetic-io.dynaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774980907, "uuid": "8c35cfed-2d2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kryptonmc.lovable.app" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968607, "uuid": "e8e25d83-2d10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "kvvfusu.chernomofnothes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774946885, "uuid": "55c0c82c-2cde-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "l4b-mesh.paleontraglan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774981026, "uuid": "d345dcc6-2d2d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "launch-pad.orbitforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963164, "uuid": "3c90c626-2d04-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ledge5-switch.prefixwag.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774978687, "uuid": "60e34c3b-2d28-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "light-trace.luminflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968966, "uuid": "bf0ac63f-2d11-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "load-spark.chernomofnothes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775000646, "uuid": "81691c37-2d5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-gate.infocircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774984084, "uuid": "f219b2ad-2d34-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "logic-gate.quantaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774967286, "uuid": "d597a00d-2d0d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "loosesnow.cuffsorbsky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969565, "uuid": "23d1636d-2d13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "lum-markal.radiatebeef.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774961885, "uuid": "424d6954-2d01-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "lumnexum1.prefixwag.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774950907, "uuid": "b310dcab-2ce7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "m0on-flow.chernomofnothes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959126, "uuid": "d5a645d6-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "markpeak.premiumtos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774915564, "uuid": "69073f57-2c95-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "math-proc.axiomforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969267, "uuid": "7208f8c3-2d12-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mer-lithen.radiatebeef.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774987745, "uuid": "77ed2a9c-2d3d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "mesh-proxy.cyberhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774959485, "uuid": "ab888702-2cfb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-cu1tur.premiumtos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774991165, "uuid": "6e495e74-2d45-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "meta-stack.datacrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940045, "uuid": "685c2e70-2cce-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "metal-trace.alkalineelement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774916227, "uuid": "f423ec29-2c96-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "micro-chip.circuitflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774983365, "uuid": "459d38cb-2d33-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "micro-pulse.quantaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774994526, "uuid": "4212e0d7-2d4d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "micro-scale.nanovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774946106, "uuid": "85809c0b-2cdc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mine-trace.metallurgiclink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774933385, "uuid": "e6ba5f10-2cbe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "mold-engine.syntheticpolymer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774923244, "uuid": "4ab77972-2ca7-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "motor-unit.dynaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774986665, "uuid": "f411afde-2d3a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "nerve-center.neurobloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774942806, "uuid": "d661e94b-2cd4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nitro-vault.cryogenicbuffer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774918267, "uuid": "b4096122-2c9b-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "north-star.polarisbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925285, "uuid": "0adc46ad-2cac-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "nova-core.cosmoforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948145, "uuid": "44b588a3-2ce1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "oasitre.paleontraglan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774978267, "uuid": "66c81998-2d27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "optic-hub.luminflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774925945, "uuid": "9427835b-2cad-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "orbit-path.cosmoforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774984745, "uuid": "7bd82119-2d36-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "packet-flow.quantaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774995846, "uuid": "54819f5f-2d50-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "particle-api.nanovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774970228, "uuid": "af09b5df-2d14-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "partnerrelay.beltfloor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774979345, "uuid": "e964763d-2d29-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "path-finder.orbitforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774946586, "uuid": "a339c8a4-2cdd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "paui.paleontraglan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954625, "uuid": "5b0a9419-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "payable-notifications.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774919345, "uuid": "36427032-2c9e-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "peak-access.polarisbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774973287, "uuid": "ce62af38-2d1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "peak-point.vertexbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954625, "uuid": "5b03e7a7-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "person.dians-store-ison.top" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774939025, "uuid": "08b3e19b-2ccc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "ph-monitor.alkalineelement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774978507, "uuid": "f5912e33-2d27-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "photo-sync.luminflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774983007, "uuid": "70336963-2d32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pilot-auth.astrahaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774993145, "uuid": "0a7a2c53-2d4a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ping-gate.signalcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774999807, "uuid": "8d5f071d-2d59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "ping-gate.signalforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976646, "uuid": "a0395cb6-2d23-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "plasma-node.novaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774933025, "uuid": "10538c70-2cbe-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "plastic-dev.syntheticpolymer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774975086, "uuid": "feba6016-2d1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "polygon-svc.vertexbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774922285, "uuid": "0e9d148d-2ca5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "power-drive.dynaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774995185, "uuid": "caa3ede2-2d4e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "precision-io.nanovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954627, "uuid": "5c60eee6-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "prosingle.com.br" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774949707, "uuid": "e7a95890-2ce4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "protectsup.chernomofnothes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774958885, "uuid": "4642fe2d-2cfa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pu1s-trail.premiumtos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774986845, "uuid": "5f74b974-2d3b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "pulse-logic.neurobloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774936146, "uuid": "54661248-2cc5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pump-gate.viscositycontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774963534, "uuid": "18faaf95-2d05-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "py28ionr.prefixwag.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774971965, "uuid": "ba85c59c-2d18-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "qz65lmfc.manchustill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774941424, "uuid": "9e545d37-2cd1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "radiant-log.isotopecleaner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774991826, "uuid": "f83a48fc-2d46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "radio-freq.signalcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774998485, "uuid": "79c65a51-2d56-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "radio-freq.signalforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992484, "uuid": "80c3d5e3-2d48-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "range-extend.signalcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931946, "uuid": "8d00bcd0-2cbb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "range-finder.isothermalmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774998187, "uuid": "c7e8db14-2d55-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "raster-node.pixelmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774926366, "uuid": "8f27c9af-2cae-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "reaction-api.catalyticprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774939746, "uuid": "b63eaa81-2ccd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "reactive-hub.alkalineelement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774973945, "uuid": "56dbe798-2d1d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "render-farm.vertexbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774996872, "uuid": "b7df07fe-2d52-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "render-grid.pixelmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774932306, "uuid": "63fb0517-2cbc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "resin-store.syntheticpolymer.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954626, "uuid": "5b7f8087-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "reutilizemais.co.mz" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774967528, "uuid": "65ab7b1e-2d0e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "rne4d7-zone.cuffsorbsky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774980007, "uuid": "73d60114-2d2b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "round-trip.orbitforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774981388, "uuid": "aac383e7-2d2e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "safe-ship.astrahaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774939209, "uuid": "761f6f22-2ccc-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "salt-buffer.alkalineelement.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774996206, "uuid": "2b2174a8-2d51-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scan-core.nanovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774965911, "uuid": "a1e39f99-2d0a-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "scarlet-tra.cuffsorbsky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988465, "uuid": "254a3787-2d3f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "secure-vault.cyberhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774937406, "uuid": "43a1f956-2cc8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "shield-base.refractorymatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774916825, "uuid": "584970e8-2c98-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "signal-box.circuitflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774995487, "uuid": "7e9850bc-2d4f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "small-unit.nanovector.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774945207, "uuid": "6d1bcdbd-2cda-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "smelt-logic.metallurgiclink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774976946, "uuid": "5324314d-2d24-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "smelt-logic.novaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774921085, "uuid": "437f6b80-2ca2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solar-api.helioshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774937765, "uuid": "19880e4d-2cc9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solid-state.refractorymatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774926966, "uuid": "f4e224c3-2caf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "solvent-vault.catalyticprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774964175, "uuid": "973a7f89-2d06-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sp0o-forge.codcomparable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774974246, "uuid": "09e97307-2d1e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spatial-api.vertexbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774984445, "uuid": "c8f5d63d-2d35-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "speed-test.quantaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774980365, "uuid": "49268643-2d2c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "spin-control.orbitforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774923606, "uuid": "2220325e-2ca8-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "spin-relay.dynaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966926, "uuid": "fec7c13c-2d0c-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "st4b1l-span.cuffsorbsky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774929608, "uuid": "1bd2d1ef-2cb6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "stable-node.molecularbonding.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774975326, "uuid": "8df04f37-2d20-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-build.novaforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924627, "uuid": "82ae8453-2caa-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-field.cosmoforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774982046, "uuid": "3300b0c2-2d30-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "star-map.astrahaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774915865, "uuid": "1c33dfe0-2c96-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "stat-portal.axiomforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774944847, "uuid": "968a70ac-2cd9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "steel-core.metallurgiclink.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954386, "uuid": "cc70167c-2cef-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sterilelan.beltfloor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774956125, "uuid": "d9361c03-2cf3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "summitgeyser.batkascript.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774920245, "uuid": "4ef7c037-2ca0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "sun-flare.helioshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774985466, "uuid": "295941e6-2d38-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "synapse-net.neurobloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774950485, "uuid": "b79a3304-2ce6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "taldrais3.chernomofnothes.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960449, "uuid": "ea304ea6-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "targettest.manchustill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931345, "uuid": "26c49317-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "temp-archive.isothermalmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774964533, "uuid": "6c5f5bdc-2d07-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "theor-spool.codcomparable.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774931707, "uuid": "fe8ded6c-2cba-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "thermal-sync.isothermalmetric.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774934648, "uuid": "d775d8e9-2cc1-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "thick-layer.viscositycontrol.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774986125, "uuid": "b27b6003-2d39-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "thought-api.neurobloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774988105, "uuid": "4ee0ba84-2d3e-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "threat-log.cyberhaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774961286, "uuid": "dcf0ac67-2cff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "tokcheck.manchustill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774974908, "uuid": "94b3928f-2d1f-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-level.vertexbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774919165, "uuid": "cafd10a9-2c9d-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "top-render.polarisbloom.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774922884, "uuid": "73ee3c48-2ca6-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "torque-svc.dynaflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774992188, "uuid": "d01edf8b-2d47-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tower-sync.signalcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774999570, "uuid": "0030f885-2d59-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "tower-sync.signalforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774940707, "uuid": "f300bc82-2ccf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "trace-element.isotopecleaner.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774972986, "uuid": "1b273e92-2d1b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vale-gra.prefixwag.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774969926, "uuid": "fac7ce90-2d13-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "value9-mesh.beltfloor.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774954625, "uuid": "5b012574-2cf0-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vault88x.secure-efficient2.su" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774971246, "uuid": "0e0cc8c2-2d17-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vaulvoc.premiumtos.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774961106, "uuid": "71c067f8-2cff-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "veobw.manchustill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774952527, "uuid": "78293973-2ceb-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "verify-invoi.radiatebeef.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774972267, "uuid": "6ea1027f-2d19-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "vgtp5o.manchustill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774997526, "uuid": "3de01407-2d54-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "video-buffer.pixelmatrix.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774951808, "uuid": "cbf33cc6-2ce9-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vn06.radiatebeef.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774968247, "uuid": "12328dfc-2d10-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "voicefjo.paleontraglan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774924984, "uuid": "57b1415a-2cab-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "void-gate.cosmoforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774982825, "uuid": "03523529-2d32-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "void-storage.astrahaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775001544, "uuid": "99217944-2d5d-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "volt-check.infocircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774916526, "uuid": "a666c545-2c97-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "volt-power.circuitflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774948507, "uuid": "1c1c5a65-2ce2-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vorforgeet.paleontraglan.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774960264, "uuid": "7c5b9b63-2cfd-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vxfxox7r.manchustill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774921925, "uuid": "385a4f0f-2ca4-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "warm-cache.helioshaven.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774991465, "uuid": "215f3eae-2d46-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wave-crest.signalcrest.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774998847, "uuid": "510f997d-2d57-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wave-form.signalforge.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774977667, "uuid": "01125590-2d26-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wave-length.luminflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774952944, "uuid": "7136fddc-2cec-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "waveque.radiatebeef.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774917247, "uuid": "53f609c2-2c99-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "wire-sync.circuitflux.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1775000826, "uuid": "ecac1b19-2d5b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "wire-sync.infocircuit.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774955824, "uuid": "258dad3d-2cf3-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "xehramf.batkascript.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774970589, "uuid": "8613d45d-2d15-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "xxhq.batkascript.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774966210, "uuid": "5436d7dd-2d0b-11f1-bc00-82aee05be84a", "comment": "Malware payload delivery host", "value": "yfjgi.cuffsorbsky.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774926666, "uuid": "41d6fb63-2caf-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "yield-monitor.catalyticprocess.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774961526, "uuid": "6c4c7965-2d00-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zennex8ar.manchustill.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774962247, "uuid": "19c11846-2d02-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zenvaleex.prefixwag.in.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1774943107, "uuid": "89f723ee-2cd5-11f1-ba1a-82aee05be84a", "comment": "Malware payload delivery host", "value": "zero-point.cryogenicbuffer.in.net" } ] } }