{ "Event": { "published": true, "date": "2026-02-02", "threat_level_id": 2, "info": "URLhaus IOCs for 2026-02-02", "timestamp": 1770077723, "analysis": 1, "event_creator_email": "urlhaus@abuse.ch", "distribution": 3, "uuid": "bcfbef8b-25d8-42a6-b46f-0049388c944c", "Orgc": { "name": "abuse.ch", "uuid": "9b086132-8588-49ed-97fd-8578a777822c" }, "Tag": [ { "colour": "#004646", "name": "type:OSINT" }, { "colour": "#fffff", "name": "tlp:white" } ], "Object": [ { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "31b75a65-ffca-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769990433, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990433, "uuid": "36240d76-8362-4946-8d86-75b0328d8bd0", "comment": "Malware payload", "value": "5709c4bd65e52bad8aad51195bb3ea70", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990433, "uuid": "9f10217d-378a-43e3-bed0-b2f9a53bb8bf", "comment": "Malware payload", "value": "1fc688871b7dd21b9d3b70c7a9f06c52a47fb37c8629940274f4815e5707a172", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990433, "uuid": "5b61c948-45a5-45ae-8960-1de949ac93d6", "value": "T16AC08CAA82A30AB9160BD55CE86448407FC0E43D1742391C68D8DCAA088C42202BCE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990433, "uuid": "813176c2-0031-4ae0-9eda-b517cb568924", "value": "3:7FCgQXFDHcDwF3wXJLKEhCWnBKQwWQAF4wHcDYLDLHcDg6M81OdsdM+BTqN:7FLQV+wZw1KEB8QjQg4dYP2g6M8pdM+Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769990433, "uuid": "e4b2a511-6c4b-4779-9d42-c75970d656cc", "value": 172, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990433, "uuid": "c7811a03-8082-4fd7-9dc6-9e8d46078d1f", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4a9acc4f-ffca-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769990474, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990474, "uuid": "61f980e7-ff36-4bd0-899e-88c2b1f266a6", "comment": "Malware payload (Mirai)", "value": "ac3bbbda0b53eaa7186880d39d0c567d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990474, "uuid": "140b84d1-c309-4ffd-80ca-98ed97712692", "comment": "Malware payload (Mirai)", "value": "e9616179b83b14eef952d7f805678b1e60a808068bacd8a0a1d2f38386966664", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990474, "uuid": "06168484-eeab-4cc4-9d79-8b33cb6632ff", "value": "T168539EB5C5A8BD98CF699278B61488389723900555E33DFAE781C7A6D00BEECF04D7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990474, "uuid": "d03e9213-6e88-4c23-840c-ac806f44bda8", "value": "1536:7aK/iivQhuniwt4gVuNosjT1Rpeycfs3QtLok1cY3CJwa:7rqiBiOViT1RGf+Kn1cY38", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769990474, "uuid": "5188ec44-923f-4188-af6d-65cb94491f12", "value": 64348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990474, "uuid": "95930d54-a507-4e82-9391-01429ccdbf42", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b4cbc671-ffca-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769990653, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990653, "uuid": "126b19ce-832b-4dae-bbf4-1280d46df81b", "comment": "Malware payload (Mirai)", "value": "b6338a02d8d11c993504c2a3d1899c3d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990653, "uuid": "ecdc4e89-7f51-493a-9031-e2361d04103e", "comment": "Malware payload (Mirai)", "value": "a30a0a31f694699239ff23e46aa714bcf6816b90d2de8098f69a9af6d65af6a3", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990653, "uuid": "91c48430-512b-4202-901f-6df0ea96cc8c", "value": "T10AD3AD97F28704A0C46305F003CB1B9E6EA321925E5BD9F37D2EAA3B5E764DB1905B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990653, "uuid": "e95025c1-7f3d-4c5f-8fb0-f3142f4451b5", "value": "1536:eb+hWNbSPEVjhv6RBbcL740VFHlX9npfR1x6UJgMIO+/LWvwk:jUgEdhv6RB4LE0Vt5ppfRrgM9+q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769990653, "uuid": "afa9afa4-971e-4cab-901b-237d116bbb65", "value": 132764, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990653, "uuid": "9bb27023-8ecb-43f7-af04-5888f80b84b6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2557a000-ffcb-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769990841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990841, "uuid": "1277c473-7085-4702-8d4a-2629f59b88a4", "comment": "Malware payload (Mirai)", "value": "fa58c9bc8545d09b7c1e63f38aff1498", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990841, "uuid": "164e3c3c-2250-46d1-baf7-abbff09abd62", "comment": "Malware payload (Mirai)", "value": "a1557617cd70615da1d274d2e92fd0c962e0949f37d72a83994d19ea85ac88f4", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990841, "uuid": "a0055eb5-bc1d-4489-a672-632175bc729a", "value": "T15523F17CE999BAA215502237FDFDCB46B65D7EBD91E2B03224900E0CF8C163537E42", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990841, "uuid": "6da13f05-8bd7-4395-8faa-964865e6cd61", "value": "768:zSh/fv1XtipWgxIw/kxqXjtkIRmeoJbP1kCHskTa66aEWtoYsSQec5gjDT7RvrWt:Y3v1XtipWg2EWqXj/VWbaCHskT0WOwDq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769990841, "uuid": "546e405e-a0f5-4f75-8baa-ee8bd47277e8", "value": 46820, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769990841, "uuid": "f0b0662f-4631-42d2-9d2b-658bd700aa1e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b2afa1dc-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mozi)", "timestamp": 1769991013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991013, "uuid": "ba3ffda4-21e2-445c-a46e-7491fe06e715", "comment": "Malware payload (Mozi)", "value": "59ce0baba11893f90527fc951ac69912", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991013, "uuid": "5a174d82-9c16-4c6d-b605-a9357befb048", "comment": "Malware payload (Mozi)", "value": "4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bla", "colour": "#FA8229", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "c2", "colour": "#b6b48d", "exportable": true, "hide_tag": false }, { "name": "ddos", "colour": "#fa4634", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991013, "uuid": "d9f98a8b-df4b-4f46-a753-273e02ab4094", "value": "E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991013, "uuid": "33411d4a-5c05-4a24-bbeb-4ecb4b4b5684", "value": "3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769991013, "uuid": "63baf8e2-6d81-40b7-929d-5fa43b37c369", "value": 135784, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "df073968-fa49-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769991249, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991249, "uuid": "3f5c50c5-5699-42c6-aaa9-ba4c1d2866f8", "comment": "Malware payload (Mirai)", "value": "dbffeca973a3c6e3e99bf7a9c6327b31", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991249, "uuid": "c6d1981d-95df-4e6d-9fbb-22decd0a2e2a", "comment": "Malware payload (Mirai)", "value": "c27bd5d6ac8115410b857aef6615746145506482f8418bf5e8c3882dc7207db8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991249, "uuid": "2b515cbe-660f-4588-8a19-b77d63da2fb3", "value": "T181B3E70AAF711EBBD4AFDD3345A5074A389C550B21B93B3A7674D81CF61A58F06E3C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991249, "uuid": "f7d5d9bb-9c9c-43b7-a0ee-28687591245d", "value": "1536:vIFsgIiQuQgiv5/e+ozB+En3Or0MlqlYCVbbd881axuxm/ru0YWZfqFX39wu7r8G:vGRvB+LDYoeOM4FIulnNSt4XS", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769991249, "uuid": "5a352ca5-cd98-4efe-b9f7-ed98d8c67919", "value": 109360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991249, "uuid": "a0f3aa0f-27bd-4c57-a202-473b5822087f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a7eba424-fd3c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769991315, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991315, "uuid": "8f994523-b7b3-469e-b6f2-d9377b69a914", "comment": "Malware payload", "value": "afbea96c40f453940d308686f45a2296", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991315, "uuid": "f596970d-a6af-481f-9bdf-40a462545e1d", "comment": "Malware payload", "value": "8b509594ca73001eb92187c14a8d929e7ea56db42a20b886e3b8661c6ec0d11c", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991315, "uuid": "2d807c6f-66a9-4977-b588-0b8e0e332f59", "value": "T16F31EA38E50ED4A0F350E8747997D56A78C8E5F6726CF4237CC9C80B799122913C6B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991315, "uuid": "40dec99c-9ede-485a-af61-f4b584dc576f", "value": "24:9WZCyXk0AFwz59zJgGMzZN9j4GlkG5KA6c/0snJAh79dHEtZCQg:9Wp7ACnSpMukMKhc/0snaF9ZAxg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769991315, "uuid": "1f3c9ea9-cc20-4219-ac61-70a3694de59e", "value": 1588, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991315, "uuid": "fb5df9d3-69b8-457a-be58-ab7ef3123cf4", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09945345-f97b-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769991457, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991457, "uuid": "621e4041-5c5f-4c21-9291-e5da22bd7043", "comment": "Malware payload (Mirai)", "value": "ba6cdb15cffb8f8977fd9bc54c8437dd", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991457, "uuid": "c8131ba8-42a9-4bc2-b00e-51dfba3655b9", "comment": "Malware payload (Mirai)", "value": "179cfdbd65f960c0b9fb37197d7c140151289d9fe1e0672b23bc0ad426338748", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991457, "uuid": "9321f798-3e61-4392-8c3f-2c48eca254af", "value": "T10F93198ABCC5C702C5E0A1B2FB1F518E371643A8E3E6B147CD19AF29674F8670A372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991457, "uuid": "d2418d8b-b50e-40db-9410-fd669b844a53", "value": "1536:GrjD1SkbihLl7RGCiZF40I3kc+vB9A72JfcMxD5WatwmvgW/vwX:Gr1veXgCvP35+Z670R5W+w03wX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769991457, "uuid": "35e41213-72ce-41f9-b2e2-c459982b0854", "value": 91528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991457, "uuid": "b1ea00e8-a628-4c44-89a8-e009c2573c17", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9a3c89d5-ffcc-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769991467, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991467, "uuid": "77b1efda-3cc3-42ae-8c2b-cd11f16b2a4b", "comment": "Malware payload (Mirai)", "value": "fa3df1c5a713e8d86f53ef9f108df59c", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991467, "uuid": "38f53559-872a-4d97-9b30-db753baa742a", "comment": "Malware payload (Mirai)", "value": "8f54bd476f3c1f2def8c3e0788ceffb6e54b9dbea4664ec24411e987c80ea6b5", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991467, "uuid": "167056e7-abd6-4aab-9033-227e78d0c1d6", "value": "T1D6C2D1D4E5126F91C7BB3FE0BB71D7D173D14B27BBC6C8925081BB021093426B7169", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991467, "uuid": "421b3418-f7b5-49e0-ab1b-87f9cb5a9955", "value": "768:ULXZeDk1u1ip7bNhC2MDkHv/jNlVX5se4uVcqgw09f:Mkr1g7JhCLkHv/jNn2e4u+qgw09f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769991467, "uuid": "898a6115-1d08-4afd-9214-7049b8e35e94", "value": 28248, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991467, "uuid": "7d75383b-93f9-481a-a97d-7acd3f5599a1", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c310b214-ffcc-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769991535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991535, "uuid": "e1084342-07ba-4600-8a12-9484206f7322", "comment": "Malware payload (Mirai)", "value": "20ce9ee1cf47927429360e486144e32d", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991535, "uuid": "367f2d86-e8be-4504-a663-58de382b79f8", "comment": "Malware payload (Mirai)", "value": "ca223542f08e0fe78a8ed2882c925438ecc2e59b709152323f27e3a77ddcfbb8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991535, "uuid": "34905e2d-9fc2-44e2-bc41-1a3ace03ddc3", "value": "T192D2E03056D200B6C5708E33977ECD112BAB0BB5D1B2FD9424204AF96AE9B367134B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991535, "uuid": "467af63a-763f-4c4b-835d-c8cffe39fb7b", "value": "768:FeaRLnMZ9cgcxPkciObQWPGKc+yMayO6xBIs3UozM:F9KJQkciAPGKyyf9zM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769991535, "uuid": "8f6c8be2-065e-47fc-8f9d-b08c24c0ab16", "value": 29944, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991535, "uuid": "031a6ceb-2da1-4452-8867-3876d68f7fb5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d661620a-ffcd-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769991997, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991997, "uuid": "3f08fa62-810f-4168-8f59-7339f48a567d", "comment": "Malware payload (Mirai)", "value": "9eccd3c6269465d46a154f459162305c", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991997, "uuid": "caba1a36-cf6d-476e-b8fb-c2578f91e50d", "comment": "Malware payload (Mirai)", "value": "15921ea12754082cef7317bca62cfd98381cc8b2c7c2074529fa22b019d8a92f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991997, "uuid": "8b8cf17f-9873-486d-af4c-f0aa3b2d2e18", "value": "T18823F18DF3408EDEC8E6C07652A853500E241BA73B53DCB26E4B7F529B698B66C421", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991997, "uuid": "05956937-8ce4-457d-b2ff-1dd951056572", "value": "768:hsK3XVCyrgs2PkDhNgVYR6sQ+PLxdk6XUG6E8+kdVTc/vWSfghTJgGlzDpbuR1JN:JVCggsAP0WyLvbXUG6E8xzSuOgXVJu3f", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769991997, "uuid": "e48f9a5a-880a-46a6-8c21-b36d17ecff9a", "value": 45996, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769991997, "uuid": "38415f4d-0961-42ca-b2e7-536fcd0d6714", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e49fe9d6-fa43-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769992301, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769992301, "uuid": "249da8b5-4a81-4f6b-833a-7f0298c2c441", "comment": "Malware payload (Mirai)", "value": "525fde52a6a4e11e8609b91b287f8747", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769992301, "uuid": "1952bc8b-b3bb-45c2-b7f1-6d2a384697b8", "comment": "Malware payload (Mirai)", "value": "1db8393738f9732c74bd79fe6b05588b0e70c484015d4511b75a0a9648b29779", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769992301, "uuid": "36682f0c-e256-4745-99b9-5b60111812f3", "value": "T1FAB3B64F6E529F6CF36C83354FB39B2AAA5523D633A0C185D25CD9411E6034E286FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769992301, "uuid": "e6787b5a-507b-41b4-b6aa-fdc0f35b5b68", "value": "1536:C1C1fSSvrVvriZr2O4PnJ9J4A8juQOyXR2vKDkUa58h8HXN:C8fE4VvaIeeMks8HXN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769992301, "uuid": "484d03d5-e361-4cff-b860-565c4eea8b71", "value": 109360, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769992301, "uuid": "991b7125-9ef9-4c0b-9a32-5e6a47a06a64", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "afe40b33-ffce-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769992362, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769992362, "uuid": "19c4ee9f-c1fb-4c50-a8b0-4db188e45a8c", "comment": "Malware payload", "value": "5d4367e95c745dfc77188033a8a0d195", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769992362, "uuid": "5eb6edf7-148f-4a60-99ef-f31e6d34d206", "comment": "Malware payload", "value": "d9d23f2d1b8f20df3206b7e48513c6201d2da5863be17729367bed98b39d166f", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769992362, "uuid": "f229dac7-70db-4c0a-b7b9-1f7b5d958cf5", "value": "T1EE8309327488582A210B428FD267336C70AFDCE2D611E5B6F6F632344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769992362, "uuid": "e0196a5b-3ca1-4274-98c0-c3af11552a26", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbn7Wa6VN/:XEKltp9txAX/yr2pb7WnVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769992362, "uuid": "f9a9e276-643e-4171-b242-b29e2aedd6fc", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769992362, "uuid": "b257fb7c-eeea-4cb2-9269-d8344d8dc572", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "525801cd-ffd0-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769993064, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993064, "uuid": "df7ccbc5-f761-4cf5-b27a-9b46d994b021", "comment": "Malware payload (Mirai)", "value": "2a91db36555f94f6ff0946879ad8b997", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993064, "uuid": "c32e92a9-822e-4f78-aba7-87a5fcc4eac2", "comment": "Malware payload (Mirai)", "value": "0f934353f72096ad16b521cc1e33f4bf589c84cfb0c983490aed78b854b768aa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993064, "uuid": "ad5cd888-17f1-4b34-b63c-81c637254b88", "value": "T1EE13F2D6D0A2CE42AA621D744FF93CC5790CC15A69DE02BAF7E0B162B9C3F50351E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993064, "uuid": "440e6b22-c9a3-4e7a-9852-b89da688e13d", "value": "768:YMD8r+c4ASBw5hvYqSHPOE2tG/kzQG7mCBC034wPqmuweHdihweMO+nbcuyD7UHK:5iNhOqAqSHWE2tGc9ZBn34wPZdxCeMt4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993064, "uuid": "e53d892d-d6ca-4de8-8fc0-00ef4b092eb8", "value": 42296, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993064, "uuid": "f1020555-ac68-4762-88c0-1963b26d923b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cb0655bf-fd0c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769993109, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993109, "uuid": "57acc868-c50c-4bdf-b623-d53d0c818802", "comment": "Malware payload", "value": "2672ee8e8d788dc301a2370ea76942a5", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993109, "uuid": "a76714fc-de86-428a-bb0a-60807ff4a87c", "comment": "Malware payload", "value": "8a3a32ce37bb5e2b4e5abd4b90997a564bace4c416d2f4bda4b3a9d32d961860", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993109, "uuid": "a06d0b65-e96f-4fd4-bf46-5863da2f2b97", "value": "T18331E790CB85B20FE8C759701B7D5A34A98050F69FE178CA19CE02717BDC2C191FB0", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993109, "uuid": "6a6741c7-e11a-4b2b-b553-71a6169c1194", "value": "24:9mQtVj/IySFu9MF+siB2qS8JgqJZD78e7vXyVYNpSXvo6gqS+70qkRPt:9moVj/B8NDiB2qS87ZD78eWYwAHq0t", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993109, "uuid": "c6ff4dd9-2eb7-4af0-8021-effeefdb01ea", "value": 1583, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993109, "uuid": "5aac1688-8246-4cf9-af3f-cd23052277f1", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2ba0eb77-f97a-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769993268, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993268, "uuid": "3ac62e75-60dc-464c-8edc-a9e2123b7b49", "comment": "Malware payload (Mirai)", "value": "e55b5bc71a74d771c8d2b81924b7cc41", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993268, "uuid": "e56c35e9-e03d-43d6-8d5a-c0c209edafe6", "comment": "Malware payload (Mirai)", "value": "7be74146ce1ff5c722bd8c19959e748bbf631a026de7bc5052906c926999688f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993268, "uuid": "dc531440-2126-4559-bdff-f6a87f361d8d", "value": "T13A930BC9BC818B11D5D126BAFE1E658D33135B78E3FE7213CE185B2E534A86B0A3B5", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993268, "uuid": "531e7570-fc9d-4719-9872-f9fbe53dc4b0", "value": "1536:0RnbEjQhRtg9lGJsDoZd8nEEwAQYfXxqOsCjesdXmkd/nscMTiHD2m08/Ui7GmYI:TMhRt2ouDoL8nEEJ5fhqOPeDo7D2m08n", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993268, "uuid": "82db1b2a-3fc1-48bb-8850-d83f63f677d6", "value": 95608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993268, "uuid": "2cf92d01-e0ce-4f3d-8998-c6e85c432cc4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7efe089b-2e1a-11ef-b2b7-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769993355, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993355, "uuid": "f0a5cb09-01e9-48e3-8621-a0b8de49e185", "comment": "Malware payload (CoinMiner)", "value": "e3bcf6c6f4d21e8a1e2789e981366973", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993355, "uuid": "b74fb8fe-eed4-4f54-829d-41ed836e5c39", "comment": "Malware payload (CoinMiner)", "value": "617e6896100c4289af8ec35ce7b719ea50c18d006b1e4e4c5fefdbee65b6fbbd", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "huntio", "colour": "#2F472C", "exportable": true, "hide_tag": false }, { "name": "iframe", "colour": "#abe58b", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "Photo.scr", "colour": "#97dc0d", "exportable": true, "hide_tag": false }, { "name": "scr", "colour": "#ce83d4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993355, "uuid": "30bc990a-f7a3-4d11-92ad-8473a2a40c57", "value": "T175563351F0409836F039147A34F984A2B47DBC724B75598BB3A93E721D393E8267DE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993355, "uuid": "4e8e03a2-e54f-41fd-a78c-8c4927a7236f", "value": "98304:zaejLqB4eFb55TJolc0GMtAKj/gXSYG47MUkc3QDJ2dfe7u0MEGCD27/Xn:7veFb5X0f/o77MvcEyG7udlp7/X", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993355, "uuid": "f9cd94c4-6323-47f7-a292-d19cf828e0bc", "value": 6247290, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993355, "uuid": "2f8d8264-383f-41c9-a536-fb703e780076", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "252ddf2a-ffd1-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769993418, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993418, "uuid": "dea0979d-8910-4567-a454-7bdd8cee6547", "comment": "Malware payload (Mirai)", "value": "6d962f429afb51b31bb13b2650c4a08d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993418, "uuid": "67843928-5c5d-41b9-9aed-f5b636d4560e", "comment": "Malware payload (Mirai)", "value": "31ed61443bac976be10b38f1812337a23504df0a0d12c178e273d19d6a8d704e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993418, "uuid": "56a89edf-f5e8-4649-a95e-70a876bd1e02", "value": "T19913F128E32512E6DABF27250C81D3D51BA2DF0AF5BE9DC54686AA43453BD3A7300E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993418, "uuid": "2c8dd4e1-e3c9-4d38-a7ae-b32e117ab908", "value": "768:cZHNoZ4shlcctWc0BLyrZx2d5Ip0vayPPbNXJc+AS5FtLMUcyDd4uVcqgw0902:Kt8h4vdyrZ4djva0ZXK+55FtLLcyDd4F", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993418, "uuid": "f2caaf9b-82b3-43cd-808d-edc37dedef3f", "value": 42876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993418, "uuid": "cf673203-20d2-4a07-aaed-3e5f634d0d89", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b70bbad1-fd0c-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769993468, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993468, "uuid": "40de264f-d38a-4ecf-8c71-b85fb6d18d9c", "comment": "Malware payload", "value": "ac995f164e1d9a65e2389b9c5911e4b6", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993468, "uuid": "1fdbbd27-c2d1-4090-a3be-97187bbf8089", "comment": "Malware payload", "value": "c932be8d6bc054a018e2c608b7b3326b8ef68eff2ddd837c884b83676791f0ea", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993468, "uuid": "e717aa79-b058-46db-854a-da6701d1b492", "value": "T178310C6ECFE6FC16DF05A5FB30D3B015F149ED868554C317C9799B8319040EA169AA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993468, "uuid": "a30004dc-b61f-46cc-a012-720a259f0ad2", "value": "48:9hFd1nGw8acCxFrTUoMo/MRX9hl/4hEeUmyn:3FdgVaNqX9vAhjUmO", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993468, "uuid": "dcb964a7-461f-4a75-81d8-b3f6d050315e", "value": 1597, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993468, "uuid": "a5fbde38-0f30-4de6-8a7e-3024b8c374bd", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62dda37c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769993476, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993476, "uuid": "05302fa6-6541-48b5-92f4-67fff0b03400", "comment": "Malware payload", "value": "fbe51695e97a45dc61967dc3241a37dc", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993476, "uuid": "7638b44d-f154-4fa3-86d8-40d58dcad221", "comment": "Malware payload", "value": "2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " ELF", "colour": "#b74ee1", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993476, "uuid": "425f3201-d117-43ed-a6d6-e2fb7193c0ea", "value": "6FD312ABC8FA89CEFE6A4FF5265B1D4B0EF6E1D5E5C43DA4412B008017F8256A514B4C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993476, "uuid": "b1ca0db4-f30b-4fa8-8316-5aacfdddeb7c", "value": "3072:/TNVO/QJHZcfFj4rwLQGTNO5VZLwHm7vuQTpZUyY6cot:7O/QJHZweEL/NOjCHm7FZZncI", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993476, "uuid": "77c13f9e-82b7-4968-80e9-c354a4ddce53", "value": 132876, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a4c85588-f979-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769993586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993586, "uuid": "30a7bf88-d315-4d6b-8da0-bba9e5927619", "comment": "Malware payload (Mirai)", "value": "2550894346e3808c2b4900cdc4340652", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993586, "uuid": "34c8d3d5-a04f-4fd9-b7a6-28548ac74c21", "comment": "Malware payload (Mirai)", "value": "c69f89332f107754f5c5e63b50dd23a67f5a6e4c8815d1e08f1343bc374f43fb", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993586, "uuid": "e260ab44-9b6d-48a2-a7f1-5886b1b1184b", "value": "T17883178ABCC5C702C5E061B6BB1F95CE371643A8E3E6B1078D19AF29674B8970F372", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993586, "uuid": "ce3e4519-6f17-4e03-b2c9-044653c9a70d", "value": "1536:JVOnNBomIn52Rg6UVm4PVeipQH712+viMxZ5lbl1HsrQX:JwnNmm1K6ote8w71xd5VnHmQX", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993586, "uuid": "5d0eadea-c395-4f26-bc6f-c4d69ce3f302", "value": 87432, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993586, "uuid": "6d24fa95-ad75-4f81-be79-344013becda8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5f8d7db9-ff8b-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769993759, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993759, "uuid": "6d8474da-d43f-47a9-9c39-ef96af0e3e04", "comment": "Malware payload", "value": "12a45e3e7c70743f529ee4e9587fd452", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993759, "uuid": "cb5be944-6048-44c9-9340-6b6b724da767", "comment": "Malware payload", "value": "b936a7feb4ff7c6df1b0dea91d3564edead1280e222566d60e30f81100b9c606", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993759, "uuid": "45f59da3-d3ff-4bfc-adf8-d67b3bbfa917", "value": "T15B310A6A11396310CF472773619BDE80B69C88703F6045CBD31923699E24A8A4E30E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993759, "uuid": "b427eed2-36a5-4aa2-a40b-c96d6dbb16da", "value": "48:9DXnBmHFK1oz3tKoTL405SwGpcK0b1041ZYXA5:BXnwHFK1oRKoTLVFWXA5", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993759, "uuid": "dbc63e01-d592-4da7-a174-9b20db8539e5", "value": 1593, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993759, "uuid": "008c4507-7209-407c-8489-e864eae075cc", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f4df226c-ffd1-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769993766, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993766, "uuid": "b58ebb30-1992-4159-985c-60ec6ce5d9d0", "comment": "Malware payload", "value": "e233019fc47b21b423763eba5fb5245d", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993766, "uuid": "db7cdcc7-39df-4efc-a162-61d80f666365", "comment": "Malware payload", "value": "c41b5ca31e1c3c2b1114dea9b5cce7e37c415297568d61456d98b8dc7c3d93b2", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993766, "uuid": "5fb4d253-6954-4ffb-ad89-f950546e0196", "value": "T14744AFB276C14DB1F9E7003545726B2B7A36FE041114DA93FBECAD49EB721025B1E2", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993766, "uuid": "191be11c-3a47-455e-a0aa-f6da8f0ac420", "value": "820af80ed1df59245b4dc1089204da99", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993766, "uuid": "3dbbd756-27f3-4d69-9cb8-8d8b80fdd756", "value": "6144:EMix9CS5Fn6SXQWdyaDTIa70FSZC8iFqj9vMX2Rg:zix4S5Fn6SXHdjDT/I0ZC8iIvMXr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993766, "uuid": "f814d018-fd9b-4422-9cca-1ae56a62912d", "value": 264920, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993766, "uuid": "779151bd-a006-4e74-95a2-7890a0379549", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3f93378b-ffd2-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769993892, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993892, "uuid": "06b5bb53-33ee-4644-8c19-c200d525b98c", "comment": "Malware payload (Mirai)", "value": "160df335ffbbed768dcdfc8dd9471d7f", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993892, "uuid": "db70fb97-0f34-45e6-89de-dc1fb8f0863c", "comment": "Malware payload (Mirai)", "value": "297a43e769e1794d19edf3f3c126e7275debaa37a231cf0f4282fe8b4ef92e30", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993892, "uuid": "858d1b60-0e43-4954-ad83-a6529943102d", "value": "T19923F2ADEAF4993ECC9D2FFB40DE17665521F0C635C12D456351CCC5B8A1629B6C40", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993892, "uuid": "3dfbd73b-e194-479b-99da-95e03d4efdf5", "value": "768:l7paSl+zipwOavSnVE//LyXn9kbcQb16YOw1Qi2LLgWgDQ4mTR5Uf9yqoNjgWQ:l0Sl+xhrLgIcQNn5/W93TtfM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993892, "uuid": "9bd637da-923d-4890-85a2-8954b1c1a2fa", "value": 47264, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993892, "uuid": "2ceb0859-fb64-4607-90d2-4526edd6381c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "67d55148-ffd2-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769993959, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993959, "uuid": "e547d6dc-f65e-4f28-973b-4ab39578f559", "comment": "Malware payload", "value": "15587ef1db2373145c8a421991efd081", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993959, "uuid": "33984502-8c91-46c4-96ac-a5b037fb5923", "comment": "Malware payload", "value": "2e81fdd875af9cb20eddbe956aed23116169b6cefad1fabcf89d5c98831683ec", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993959, "uuid": "529e4665-6141-4a41-8f6e-1201d88b7dd5", "value": "T1C38512A23AC9C43BD2AA153384B697A17639BD354B30E0CFB7A0796D5D317C2B8353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993959, "uuid": "7022bf6c-6ce0-4069-9150-d6fc77bca85c", "value": "24576:GtLcpVLx8mcmye8/ytSfBxrt2a7Nb0Ms7SmwVgVKH1+K5lhapQ4k+C0i:bpxx8KyitSpxpj7Nb0Wmwp1+yA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769993959, "uuid": "cfd9cfa7-1932-4e81-a38b-78c45e43038c", "value": 1777664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993959, "uuid": "01e7308d-97ed-4c71-82e9-509538abd030", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a5522fbd-ffd2-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769994063, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994063, "uuid": "abf498ee-0ee0-4858-b8a6-1d596aec2716", "comment": "Malware payload (Mirai)", "value": "7b4b2ccdffb8eaf3d4d8de13c4ac98fb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994063, "uuid": "f1702793-fdb0-44dd-95d8-287800479607", "comment": "Malware payload (Mirai)", "value": "88e0118e171697f736f979e2cf20574aef495909ee8da00f95c1c188b35c77c8", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994063, "uuid": "874f4ffe-4567-4193-bb9e-4bf371024dfb", "value": "T1F6630295F363F4004A640932ADA9E9878ED28BFE059BE1F1309BC59DBE4518112E4D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994063, "uuid": "b5f29df1-7528-4618-bb9e-7eeedfccbb13", "value": "1536:fbd0f2v4NnBfsP8QUEIvwCxW4nWWb5A+IW6LKmrVTL0H:fyf2vkfsPylRW4rb5oLKm90H", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769994063, "uuid": "28b7ace6-6c42-42ed-810e-eaa509ba7510", "value": 69396, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994063, "uuid": "7e401fe5-61ad-45e3-ab4f-79bcaf8ed3a6", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "89d6b18c-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1769994069, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994069, "uuid": "40b26c54-f2f1-40fd-9e56-b834dbdd3745", "comment": "Malware payload", "value": "3849f30b51a5c49e8d1546960cc206c7", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994069, "uuid": "c218b8ea-55da-4352-b993-e756e9fd5adb", "comment": "Malware payload", "value": "f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994069, "uuid": "df3a6336-4065-4081-a81e-c563837ff6c0", "value": "59D31322D3130C4FC02579FA7A2BE62A39873E6A24CE449C45F5D66A2FB7084ED71753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994069, "uuid": "31192d0b-a037-4a0a-a4e8-d0df00fdbec5", "value": "3072:biMYFJvw6Yh0b1gKobtCGCmCRlrisfrYm:fYFJvwe1gKCYVl2szN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769994069, "uuid": "19c14eef-6f6e-459e-9f0a-8a4851c4c217", "value": 137480, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "42ea544c-ffd3-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769994327, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994327, "uuid": "6cda10ea-7971-4dc4-91d5-fb895040dca8", "comment": "Malware payload", "value": "a0857fed9f9dea8651d402df1117bf88", "object_relation": "md5", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994327, "uuid": "d6f6c780-2cc6-4178-9f7d-c95405bfaf9b", "comment": "Malware payload", "value": "ddc263592663be3d5467623ebb28dec9f826fe0f1bc7a6c5ed4c25cf36bfa46d", "object_relation": "sha256", "Tag": [ { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "exe", "colour": "#ccae1b", "exportable": true, "hide_tag": false }, { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994327, "uuid": "f8c73388-2d50-4ea2-afe9-18fe65faf515", "value": "T18355236130C0E4B2D87A417104E68F749F39B02097A955D7FBE82B6E9DA07C27B362", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994327, "uuid": "e01cd2ee-0de5-49dd-af1d-a5f92bae5367", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994327, "uuid": "efd9079b-7d55-48a8-a678-cd02fb3d973b", "value": "24576:Kk70TrcYUPkZTsJpym6Sw7XiC/T0wKZR91yKlG/T1KVO2sMWRfrsQ8rNisSNWH:KkQTAYUZH6RLiQI9ZRqVKVOTMwfrszgW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769994327, "uuid": "7b2da754-48ed-4a96-ba73-a66a04950000", "value": 1302528, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994327, "uuid": "25a8cabf-52cd-4879-abeb-796a616b4e91", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4673c134-ffd3-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769994333, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994333, "uuid": "36aef1a6-59b0-4956-b469-73bb6f62bbc0", "comment": "Malware payload (Mirai)", "value": "277cb9e3ef95bccd35ada2513627384b", "object_relation": "md5", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994333, "uuid": "a143ad9f-f4e0-44e8-bd05-24cc0cb0bec6", "comment": "Malware payload (Mirai)", "value": "77eff310178a1f98ce47108f7c6a6424358dc05ad34628cdbb28dce845bdb6a8", "object_relation": "sha256", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994333, "uuid": "50cda6ea-0ffa-4529-bd04-d27fa3c196f6", "value": "T149F0BBCEB8116BE3040C4E85B2D9948430D0D2D55119EF587C6C74BE4EE7E087728E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994333, "uuid": "5ca2ecec-992f-440a-87dd-de787979156d", "value": "12:jdgdwdgn4XdgxNIl5qGjdg9c0LK0Ddg16mXdg2aKGv:jdZde0duNI7ldKfK0DdVedvFGv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769994333, "uuid": "ddd24c24-39cf-4eaa-877d-1e54d16debd5", "value": 519, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994333, "uuid": "742b0e4d-45d6-438d-9944-8336f7c753cf", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed333931-ffd3-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769994613, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994613, "uuid": "bcdf2267-51af-469f-971c-2dbda2f06c26", "comment": "Malware payload", "value": "d86826766998233bf43eac162363af06", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994613, "uuid": "a0f7f681-ccb2-42de-bae6-d5ef7783495a", "comment": "Malware payload", "value": "ae105812b23489f69cfba7b332e81552f2075262818cc4155bcf05c3c0555a74", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994613, "uuid": "9a543fdc-8fa9-4230-a7ec-51b30cfdd3f9", "value": "T1BAF6331972A402E3FCE6C93A49A3C4B492262D6317A2C15F92D8BE933D737D1163B7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994613, "uuid": "a0ffe97d-904b-4af4-a1ac-245ba3184254", "value": "965e162fe6366ee377aa9bc80bdd5c65", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994613, "uuid": "cb415da0-272e-4dff-811a-dc298a3c3713", "value": "393216:U+nAuEvwGaa5wEMiuHClcuC9XA4C7yiV6ILiA:U9GaGziuilJCNA4C7tVBLj", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769994613, "uuid": "6c2310a2-561c-4996-9e72-5bb9f59d93f3", "value": 16161752, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994613, "uuid": "5537d558-7a80-4308-899f-488a8540e73e", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "607dc654-f979-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769994721, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994721, "uuid": "47b7cf68-7af7-4067-8ec0-3cd07ad2cb35", "comment": "Malware payload (Mirai)", "value": "2f1d33aee7d240795ec5a984ed2bda66", "object_relation": "md5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994721, "uuid": "e8060268-e35a-49ac-8670-ff487f8e7772", "comment": "Malware payload (Mirai)", "value": "3f200a3f58080153144d9de9fc6793935953d69b0cab3ad0f3e53b7a28c0606f", "object_relation": "sha256", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994721, "uuid": "0fff2c07-ebdc-4328-8a3b-278566ccb3d3", "value": "T1C4B30889BC818B11D5D625BAFE0E618933138F78E3FA7113DE149B2E538E86B0B375", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994721, "uuid": "d94c91ad-abea-4525-8075-7f67a8131f46", "value": "3072:CZtA3mX5wMfEDofzN/ewyNwRCR75DmuldrPo1edX:swF8NCwRCR75KuldDo", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769994721, "uuid": "7b22fdd9-a6b0-420e-b0c3-790bc7106058", "value": 108064, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994721, "uuid": "acebe35e-b970-4aad-a7fc-5339b7523110", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "952f2795-ffd4-11f0-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1769994894, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994894, "uuid": "d7477fd4-d52d-4dac-a641-7c329e22d2cd", "comment": "Malware payload (CoinMiner)", "value": "02f224d27daf4cad829620b56dd06a52", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994894, "uuid": "aa494960-1c99-4c86-ae6a-541d0a496951", "comment": "Malware payload (CoinMiner)", "value": "50b1139cf28c6dccaf8a809cf0d29805f0f04e916cd9d89f678cbed55baeb233", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994894, "uuid": "25d4b2ff-2343-4542-a392-8d123ef9e8a5", "value": "T124F5338462AB04E9E9E3C5B2DB3417F1E60A6091D36593DF96C182B07F9D3C24F34A", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994894, "uuid": "b666dfd6-417a-45a9-8cf7-1adae7278c72", "value": "3641b918fa6fcd6b6754b75fd2065c00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994894, "uuid": "a6aeba4d-9ace-4fe3-8d04-21333ed14826", "value": "98304:Z6a8P+sSNSwEbiBtVtqVjTGhGrOAbghwe:Z6ad1NqbytqZTGhAk1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769994894, "uuid": "e203f996-777f-44ec-9a87-08e42ed36a93", "value": 3443512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994894, "uuid": "42f6ac2d-84b7-4792-a8f1-571de936f806", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bfa26a65-ffd4-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769994966, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994966, "uuid": "ce062f1d-6213-42d4-bb65-67de3e5a0ae1", "comment": "Malware payload (Mirai)", "value": "6f935360230fe517dc6ae2b66d5d2919", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994966, "uuid": "90895f63-5e85-4733-a564-a9499aeb3e32", "comment": "Malware payload (Mirai)", "value": "9b11e882c1fe14a3555a9efa09e490a5955d8c23406aa9b5d22d5e432673c492", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994966, "uuid": "51853034-1243-498f-b362-05e0967ec1e2", "value": "T16CA34A22B9760927C4C0A4B621F74725F5F287DA26AC9A1B7D710E8EBF216403257F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994966, "uuid": "ac7383ec-d286-4470-9d3f-373a9cb7f412", "value": "1536:D/Som9rp0Hy2x2dxAGJdjhs9vTWXoBHOtYkaJjDN+S5aLPdDkQ7jlt0FZ4:DaZ9rpW3yNKThOukaJ3NV4Py1/4", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769994966, "uuid": "fb9f5fbe-1b54-4986-9081-43d923fa374d", "value": 100048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994966, "uuid": "4225f5c7-165c-4dac-894b-10f8e73cc00f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d125dd42-ffd4-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769994995, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994995, "uuid": "b072114d-61a4-4b7c-b61a-8faca6d63742", "comment": "Malware payload (Mirai)", "value": "42c3e4b7a16821f5e94402c24af7bca8", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994995, "uuid": "23d6a3dc-cdc7-41a8-8dc4-304265f114c6", "comment": "Malware payload (Mirai)", "value": "6e7fbd0f4a7ddbf9e62ef6e835be53531a46f65ecd5747ec3be40e1345bdedfd", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994995, "uuid": "6bb2d63e-ac16-4478-8bee-553e9e659e4f", "value": "T1B813E071026165B2C0F80A3FE85ECF8633B76AFA90FB3163431C0B54958189A6779B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994995, "uuid": "f9c3dde9-c3d7-45eb-a387-ae9d3bf687fe", "value": "768:PKqFAcd6WsjdbXwXxJF9g+BWMzmMQNwPKH23/ThvRHN0EOO0vs3UozC:Llt/tWGxgwPKH0dZtb4izC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769994995, "uuid": "b693ac5a-6c0b-41c2-a646-d4416736b53d", "value": 43740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994995, "uuid": "85f1ff58-5dd1-4061-8a63-1cf3c25afde0", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e33314e1-ffd4-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1769995025, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995025, "uuid": "3461938b-2c26-4709-b9bc-f4da9fa48667", "comment": "Malware payload", "value": "4f713f09daf7c470ef08dd58dd31395f", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995025, "uuid": "9cf42d89-2ad0-4344-8fd2-33d204d84569", "comment": "Malware payload", "value": "379b7783b0ad1be91022dbfeb8d4159738968898e7c1375aade28b8bd6ecc669", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769995025, "uuid": "1fec8699-2c05-4a0d-a6c7-52a4acb3610a", "value": "T174061210D926DDAA055C912820A60EDB25500DB76C4837BA3F9E5F8E0F4F21FD47A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769995025, "uuid": "1b8dd37b-cfd9-46ed-9b8b-8b2a841fd656", "value": "49152:/RJJ9HtFeegxppYEhrWCGhXJiS/cNec982IUUcciy/Mgzh:N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769995025, "uuid": "d441ca2b-52d7-4a81-ae6f-31f5bd393a56", "value": 3730993, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769995025, "uuid": "1767c0ef-f564-4323-8644-e0a2b7877658", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0a9d415b-ffd5-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769995091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995091, "uuid": "aab34982-e7ab-448c-b3e2-1edc93a48efd", "comment": "Malware payload (Mirai)", "value": "bd2c3557b0feeeb5376fdff21015946b", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995091, "uuid": "a2277963-361a-43fb-bc81-3ffb82376475", "comment": "Malware payload (Mirai)", "value": "93a9cb9419b8d7e78192321747af78115cbbd27a7d3cd4fc906581884d8d02fa", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769995091, "uuid": "e3f77651-15a1-4834-a9fd-47392aedddfc", "value": "T1A1833B51FD814662CAC116B7FB6E028D376613A8E2EE7203DD255F2137CB91B0E779", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769995091, "uuid": "a71b065a-88f0-49bd-8263-c87a8892acd4", "value": "1536:hu7DHAc+n2aYwMG8YL38MWaEA69OczG6oMLcrOm3DNZAw0yL:hu7Dgcg2a+0mA69C6oMPwDnp", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769995091, "uuid": "d8cd07ea-4ced-4466-b423-e7dd1cd98b1f", "value": 88124, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769995091, "uuid": "bf13016c-4678-4125-93dd-dd8a8953bc76", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "299d7965-ffdc-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1769998150, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769998150, "uuid": "49151e7c-cf26-4180-856e-04746283ba3a", "comment": "Malware payload (Mirai)", "value": "227f603799938ebe77aa2a6fdf949074", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769998150, "uuid": "a59bfb17-704e-4be9-b04a-a5ea424d32e0", "comment": "Malware payload (Mirai)", "value": "02cf7de7f7e03da69b03bd7a247201afcddfce45bf960b3b8c5ebe2176968870", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769998150, "uuid": "d4c40cbc-8869-4860-a2f3-090aacf8e891", "value": "T18DC2E18E86D59A89CFAD5F7AF6C843BB1C14E4D1129E4F562700468C3A7020FEDE70", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769998150, "uuid": "44ba9a6e-4be9-4b14-81d1-120a1056491d", "value": "384:jVmDDQiLHGevWAox/+0ZIyYI8FypT8u2gUGQBGOlCj36VrGtub0EKWPGqRWGVCzi:jV+DTOA3yxzp8u2g64OlCj3crGtgnW6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769998150, "uuid": "0bdf685b-2fd6-4e28-b78d-691933eaac40", "value": 26228, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1769998150, "uuid": "bc05f317-3a35-418e-b550-e97fff521216", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1ce1ee42-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Mirai)", "timestamp": 1769998517, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1769998517, "uuid": "dc7bdb9f-eeee-42ae-ae82-5489f7a4a4d7", "comment": "Malware payload (Mirai)", "value": "eec5c6c219535fba3a0492ea8118b397", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1769998517, "uuid": "3b28c3fd-1130-40bd-acbe-654e8fdbce6e", "comment": "Malware payload (Mirai)", "value": "12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": " Mozi", "colour": "#546ca1", "exportable": true, "hide_tag": false }, { "name": "32", "colour": "#6ed3c3", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "bash", "colour": "#978035", "exportable": true, "hide_tag": false }, { "name": "bashlite", "colour": "#942e2b", "exportable": true, "hide_tag": false }, { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "download", "colour": "#e2dcd3", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "iot", "colour": "#a93a04", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "test", "colour": "#a35340", "exportable": true, "hide_tag": false }, { "name": "ua-curl", "colour": "#4761B1", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1769998517, "uuid": "4ac3ca79-fc6d-479c-8179-03c62a606b94", "value": "13643A8AFD81AE25D5C126BBFE2F4289331317B8D2EB71029D145F2876CA94F0F7A541", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1769998517, "uuid": "78c54ed6-f8e6-418b-aeef-ce4efb357ae6", "value": "6144:T2s/gAWuboqsJ9xcJxspJBqQgTuaJZRhVabE5wKSDP99zBa77oNsKqqfPqOJ:T2s/bW+UmJqBxAuaPRhVabEDSDP99zBT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1769998517, "uuid": "8517281a-840a-401c-bb8b-fc351bda306b", "value": 307960, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bf522ba-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011020, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011020, "uuid": "791627be-d816-48d5-ba20-b426b2949e0b", "comment": "Malware payload (Kaiji)", "value": "4ccfb94f84ce77bca5a6b8f23266a7b6", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011020, "uuid": "4413fc65-c149-45f1-ac67-c647d3882380", "comment": "Malware payload (Kaiji)", "value": "fba4302d3ccd5d38332234a75e3ef21e56fd8bb03f8303f5891a5ff2de5d6fc1", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011020, "uuid": "6132cbe8-033d-4ad7-b345-fb87219f308b", "value": "T175365C80BB0CD139EA5B0A724C738F2063617E46C1E4866B771AF76F05B16E65A0FE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011020, "uuid": "1b08f620-ae4f-4a0d-b8c3-926e5613c51e", "value": "49152:UbfIMWeDTyKn8Nrwtt56e3JLxKYzYR2iLHwOng/KosjiwoNy5bfkf325NV:MgMWeDTyK86t53txKSi21S7/kf327", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011020, "uuid": "0c5a3362-9f09-486a-aed6-d5f6be625a76", "value": 5111808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011020, "uuid": "7113ab9a-0a29-4ff5-abee-bfb4909217d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f50534a-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011031, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011031, "uuid": "5a420e89-8708-42e9-a05b-7a0734116028", "comment": "Malware payload (Kaiji)", "value": "8e11a9b9365974a7e578c6b2c9067d77", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011031, "uuid": "67478e3f-185f-4ffe-8add-6faa773d45b4", "comment": "Malware payload (Kaiji)", "value": "c2c5bb4bfbfa9913ab3faf9711f9d06dba46872071971ee4adc79c8cde1647fa", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011031, "uuid": "da9c56e5-3f62-4ee1-a5a0-d049fc734f8a", "value": "T1C9560902EEC26E66C5CC037485FE979672507E085B951B2313A8EBA8397773DEF468", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011031, "uuid": "b7f52b3a-3110-498a-9776-c5e2231b67a4", "value": "98304:Z9mVusEEQ4kVIb0IamIIkmrIGDeII8jOSPso:bu8VIb0IamIIkmrIGDeII8Hso", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011031, "uuid": "dd742326-7210-41b7-900c-e77c8bbcc82f", "value": 5963776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011031, "uuid": "8c05df48-907a-425c-bec9-8a3b8ce5049c", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6f03bcc6-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011076, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011076, "uuid": "7b3f7a25-b49a-42b7-8685-bf3a768d3f65", "comment": "Malware payload (Kaiji)", "value": "18bb0f34cfcfb6287ead3d4b563b5ad3", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011076, "uuid": "e7aaaf41-ed09-41c2-8098-735e12d1d97f", "comment": "Malware payload (Kaiji)", "value": "6455c6a8aac5a7b31a3041cec32048b9e7141117cf0f38cc5a797f652e9592a0", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011076, "uuid": "facf9f9b-6ed7-4915-9195-9d5fdae9dea2", "value": "T12A560912BF58ED2FD25421308BB7C23433D53D1482E16533AA56F71E2EBA2B5991BD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011076, "uuid": "fa6dd448-d8b7-48db-96bd-2516dc857348", "value": "49152:XralYsYZ/MjJ7fhH2pCQLg1xbnZdY3MniUj0E/GiV:Xr9lMjJ7fojWjV/P", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011076, "uuid": "fa18dacc-faa1-4fc4-8856-a0deba88eb96", "value": 5963776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011076, "uuid": "76212484-ca64-44d1-bf2f-0cb84d6ed690", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e8ddbef-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011095, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011095, "uuid": "bdc3e8a3-7687-4c07-8e25-058aa8d7dc4e", "comment": "Malware payload (Kaiji)", "value": "6e689624de659c7fdebb8e9d3dfa9b58", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011095, "uuid": "094bf969-e044-4a2a-899e-761e040c2d03", "comment": "Malware payload (Kaiji)", "value": "0d16727d2da098191b458090834cf8d12dab98c5131500147a8a30ba5cd57491", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011095, "uuid": "96c1b4f4-c5b8-4cd6-bafd-1582c577012f", "value": "T1F85629037E28D71EC62921345EB2CA9467393C9545DAAA13B395F30EA8F20BC595FD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011095, "uuid": "36fb63a0-a6cc-4297-a698-c4240712720a", "value": "49152:L3qbSw1zUu72RTScFnsKbyRHzPDPs4coYtJkEk2wBIxWyDp/9zUH+zOu1x83ZIqG:jqO0o2egDQ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011095, "uuid": "ce2a6087-04f5-44cc-990e-2c3065390832", "value": 5898240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011095, "uuid": "53b8330c-aeb2-4149-88db-736260f1d02f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6636916e-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011146, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011146, "uuid": "e7dec8cb-f46c-475e-ae97-4e5d36f2c705", "comment": "Malware payload (Kaiji)", "value": "c00d5fb6bc0b39fe737aaccc8b98a589", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011146, "uuid": "676a2c15-c56c-401c-a7ba-c05ec37a8886", "comment": "Malware payload (Kaiji)", "value": "f16d88d796861fafef6b01b464b979704790207068a147da6967a902f61052f8", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011146, "uuid": "56523689-3dc9-4d60-87a1-03900cc209d6", "value": "T150361957B8D28642C0E4367AB8BDC1C433A35EB99B9B62575D04FE3D3ABE1990E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011146, "uuid": "6883f1e6-974a-438f-aeff-1a939cbda683", "value": "49152:QtKY0CdO+kBRx0Tg0qTecEG7meYuh9+lYfQMcU1F1:OKY3U+qRxQ3qKHM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011146, "uuid": "109a1a1f-6f10-463a-b8c0-530d82dab4b5", "value": 5308416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011146, "uuid": "5223db15-3b14-4bb9-862a-d0c8e39b2b50", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62aeccd9-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011161, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011161, "uuid": "aae3c9f7-0a93-4167-a834-7fcb892ac0de", "comment": "Malware payload (Kaiji)", "value": "ec31778cd1d8b6427bf2f1d68ae49ddd", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011161, "uuid": "e8249db0-4bda-4d60-a3ad-e04e60278ad4", "comment": "Malware payload (Kaiji)", "value": "5a7eaef4848d9e4056001064e5754e86383380572c3f0e43910844ee5832a5b2", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011161, "uuid": "1e7831c8-1859-4f9b-9bf0-49842b17bf2e", "value": "T1A3463943F89095A8C1EED13086629293BA717C895F3463D32F50FBB92B76BD46E793", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011161, "uuid": "266d85d3-aa1e-44fa-93a2-854ac1928946", "value": "49152:7Xa6xzZWhrb/T4vO90dL3BmAFd4A64nsfJPJ6TdXnT9aqeJaz2xNkapDnYRQoj1H:b2ONLBzSxtSTLElHz", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011161, "uuid": "affcdb5f-f104-44b7-9813-048cff6b6d1b", "value": 5435392, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011161, "uuid": "2512be08-4c93-4b84-92fd-e21290bf1f44", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b79437b-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011166, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011166, "uuid": "962a27ce-2cd6-43c9-acdb-fc552de589fb", "comment": "Malware payload (Kaiji)", "value": "ee0373a8336e794f702b0278e16af96b", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011166, "uuid": "efa1994c-7be4-4bda-b7f8-86c2a95a1355", "comment": "Malware payload (Kaiji)", "value": "6efaad7105c1442f8e047d51d05794e920b33ef37ee5196b79e282a8932f2b38", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011166, "uuid": "fc2aa035-af2c-4c87-980e-5c55a644e3c8", "value": "T14B361A57B8D28A42C0E4367AACBDC1C433671EB99B9B12675D04FE3D3ABE1990E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011166, "uuid": "818a0ec5-5d54-4022-8cc9-1d2a30853dd7", "value": "49152:PJzG9XxZPF773LVPN9GnMbaVZGNJru8cYWPAXq7nLYvV2rzmpxUIU1F1:hzG9Xn53LtN9pbu0Jru8cYWPAXqk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011166, "uuid": "66cab364-30fd-4f6b-8f90-8deb3248944a", "value": 5308416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011166, "uuid": "96da6bd2-3107-42b5-8bcc-3c8054ff75a9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6eeb931a-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011234, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011234, "uuid": "e7dfc469-3c3d-478d-bdc2-af79b3760829", "comment": "Malware payload (Kaiji)", "value": "14941f684a016ed751ef1a6c80881455", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011234, "uuid": "a1090a9d-1234-405b-a4e7-4819f8ad40e3", "comment": "Malware payload (Kaiji)", "value": "27e390c72f524d1a3445c04c15683e4ec16e7db00ab615b2713e923c1d9dbdb4", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011234, "uuid": "79be8712-3d56-48f0-92e6-30cb17d7ff75", "value": "T13756E604BDC46BB6C82C8B7584E6CA9223B06D144AF15A271664FED9BC762787F47C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011234, "uuid": "54cd42fb-72cb-46ad-9da0-535a3e631ab1", "value": "49152:+RxVVRFMTwFupkYzfgh7rxQ2USaU85Jbq1rQcR6VYv0VF1:", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011234, "uuid": "b0706bd4-f428-4727-8585-7784b68ec782", "value": 5898240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011234, "uuid": "3532281b-5bce-43fd-831b-4c0dc7d1faa8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6b6bc85b-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011269, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011269, "uuid": "fe2d7b65-3a0b-42fd-b038-fd0a0ce284a3", "comment": "Malware payload (Kaiji)", "value": "46a3ec4c8e0debf6b5fa5d2d04bcaa18", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011269, "uuid": "86e9d8b3-78b5-42d0-87f0-61806ebde320", "comment": "Malware payload (Kaiji)", "value": "4ff2dd1d643e753fa1c185067951c38e6da45298e0203ea6844bf5b98a43c5c2", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011269, "uuid": "44b892cd-bef1-44cb-ae36-8dfeaca12427", "value": "T15E5627037E18D71EC62922305DB2CAD4672A3C8546DB9613B391F31EB8F11AC696ED", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011269, "uuid": "56bc64af-e874-4147-a433-ba0acbb7a0af", "value": "49152:H2EpH9kX4nazMqH5Erob6XMv7fn3FuL9idt42uXYfTYetBDa9zrHAMnRHsLFnoeF:WEiAQUMZudhDM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011269, "uuid": "3dd841d0-e041-4211-bfe8-b77685bca48e", "value": 5898240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011269, "uuid": "5c57c171-f65c-43c5-b1a1-6703c0253f30", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "5e35f4aa-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011285, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011285, "uuid": "bcf5e02b-6905-4f7e-98e5-c22afb3738e6", "comment": "Malware payload (Kaiji)", "value": "3b8c8bf6ddbe741ef9441ff2003aa7ed", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011285, "uuid": "23b6f591-d959-4d3a-8a5c-ec5a7404bff3", "comment": "Malware payload (Kaiji)", "value": "7d647c6969dfe7b9ce29e28a05ccc06d7d49e5a523c7926733ab49c3a2bfac29", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011285, "uuid": "fdbb493b-b290-44e8-b871-3224d73d551f", "value": "T172365B65BD5EE462E6C833783B7193D4323EBC489F4192235610FFAE99F67688F121", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011285, "uuid": "07eed985-3b76-40b6-8c52-669f4ef158c2", "value": "49152:7H+5dH9Zq/34LCFNoUAFKVCsN5EN2q3OY2NXxB1:r+5dH+/34LCFNoUTVCsDEN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011285, "uuid": "9587d168-4d1a-4ffe-b8f0-3e6d83ba7bcc", "value": 5177344, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011285, "uuid": "4b03006d-8974-46ba-a7b4-b01e3c12ca24", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6bf3f406-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011290, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011290, "uuid": "8b2d4b74-d48f-45e3-97ee-b9c3056598a3", "comment": "Malware payload (Kaiji)", "value": "a7a8ce6e5c1c55280e14cbf2453a6eb5", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011290, "uuid": "d0b4237d-9d05-4eab-a56c-fde416f78fa1", "comment": "Malware payload (Kaiji)", "value": "a6432d24da1628af074c893b16422f3a6cdbc588de18cabba964e2b7f7704c34", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011290, "uuid": "72d2f342-ae38-4253-b67f-c83b61b037e9", "value": "T1FB56E704ADC56BA6C06C9B7584EBCE9523B06D044AF12B271664FEDAB8762747F07C", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011290, "uuid": "98d3b3dd-363c-4691-8ded-77d53c43ff85", "value": "98304:yC91hAFxvW6WGVqq7g3JDCg76dAuE8iW5ay5mIOX+aaNcc8pNkxXkz8xBs3K4HUY:yC91hAFxvW6WGVqq7g3JDCg76dAuE8iP", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011290, "uuid": "626d7bc0-d214-43e6-944c-43a4b4e43121", "value": 5898240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011290, "uuid": "6c3e5a22-30df-46dd-a66f-b2acabe71574", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "634cb8bc-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011326, "uuid": "b7b22871-cd9e-4c13-b6c7-066188a94e42", "comment": "Malware payload (Kaiji)", "value": "cd7e72a6f67487f564106246f11e6a56", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011326, "uuid": "992701db-ea4b-42c8-a9d1-0722736e3102", "comment": "Malware payload (Kaiji)", "value": "6b115dc273d943e59053a41b5637756878367ec08294dcd94307669dafd8daa9", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011326, "uuid": "3ba56ca4-6a62-4ba7-b169-be06a55fef59", "value": "T131362A57B8D28A42C0E4367ABCBDC1C432675EB99B9B12675D04FE3D3ABE1990E353", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011326, "uuid": "88ee8783-b807-46d1-81ba-e5b1af6e148d", "value": "98304:8cSBHdgN2a7JP97kJru8cYWPAXq8u+60:8cS03Eu+6", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011326, "uuid": "c99189c7-ac6a-401e-8b8e-fac0a912e484", "value": 5308416, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011326, "uuid": "31fc1574-d47d-43eb-8927-5ba6298f7716", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "63caa145-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011351, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011351, "uuid": "8982268a-e8a7-444d-9340-add783dafc56", "comment": "Malware payload (Kaiji)", "value": "0a9c826a1d0f079f37973a6fb15cf79b", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011351, "uuid": "f36e8b87-1e3e-43de-80e8-a80fe197eb5d", "comment": "Malware payload (Kaiji)", "value": "fcdbd042bf46dd262812f3ceb6d2b8bbec48535c170c88619623c351d70444ac", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011351, "uuid": "388ad188-11e2-4dc6-af56-54fc564bf6cd", "value": "T1D3364A10FECB54F6D5031D3044ABE2AF67316D064B25EB83EA047F6AF97B6A51D322", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011351, "uuid": "612035be-8e1a-4bf0-9514-9953a0d287a8", "value": "49152:E33d0lGt6UHcFL7Rn2o03wiEhiDmzzd/9sARlBs/00Cpfx9a9uN3p9hW16klbU6V:E33GlbU8FwmzzRDZ9mEqRV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011351, "uuid": "80c78e52-3508-43c1-b76a-325bcdad6e86", "value": 5251072, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011351, "uuid": "52c9be1a-63bf-4d53-b1d7-5e3269b5ff7b", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "62bc2dec-ffab-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Kaiji)", "timestamp": 1770011368, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011368, "uuid": "b6e28d74-1bf5-466b-b5d5-53f34d211120", "comment": "Malware payload (Kaiji)", "value": "59a9caf9445f56759929691d7f637073", "object_relation": "md5", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011368, "uuid": "585313c2-3190-4bd5-9ae4-16ee421ffad5", "comment": "Malware payload (Kaiji)", "value": "c2021e22711f5f1442dfe6bad84427a902eb388065e28029d018add9f5681694", "object_relation": "sha256", "Tag": [ { "name": "botnet", "colour": "#0f456a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "Kaiji", "colour": "#2b8cc0", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011368, "uuid": "5af2a2e6-9380-4616-b7e9-649706e050b9", "value": "T181363942B7086FA9CA60493385B38ED117727D996F315343AB14FABEA8B63054F15F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011368, "uuid": "7815e594-1afe-4143-b943-22037188fd6d", "value": "49152:i2LzgioAq4P670Og/d6I+eFRgjpmbLQYLy288ntKyB1:nLzgioh4P670Og/d6I+wgjpaLys", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011368, "uuid": "4d88c75c-c9b5-447a-9862-e586605a318b", "value": 5111808, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011368, "uuid": "37f0c1b9-4789-47a5-92f7-7de8eaed194f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "a866fe3c-fffb-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770011677, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011677, "uuid": "c1a59257-f60d-4b5e-bf4d-9c6cb3a2f570", "comment": "Malware payload", "value": "835b5c9e8401569d9ad9e653501c2509", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011677, "uuid": "5acb8d73-6629-4b21-a144-7cbf9d718998", "comment": "Malware payload", "value": "34e8f4691277cd6e33f5d4164277ce04291d6d0de7c8942d03ecb60ece8e2a1a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011677, "uuid": "e9310c83-3ffc-4073-b117-34120e28ad68", "value": "T10DA3E91916670890F1EEDDC00D89B8BA1A137773A5E11BF967CCD64CCD16EED28C36", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011677, "uuid": "bfd9c015-09f7-4d3c-b7d5-47901b8bfd29", "value": "1536:h4Xku131N6/RTVBMKJu83mPm+sezkTiBHAw06IyGbwgewyDjEYgIPLOAj1QJzqAZ:agVBH3mPm+sqk+HAw0F5KijXxZ", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770011677, "uuid": "69894fc1-2969-451e-9f7b-3bb986d32886", "value": 98122, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011677, "uuid": "49ca5562-fb7d-4d0c-a510-219ada4a81b7", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "368afb6f-fffd-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770012345, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770012345, "uuid": "e7c3c35e-db08-40f5-83e1-f223a228b2bc", "comment": "Malware payload", "value": "bedd041df0af532b12538408b678243a", "object_relation": "md5", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770012345, "uuid": "0b3f90cb-7d2e-4f1c-8cc8-371ae353cf5f", "comment": "Malware payload", "value": "90ad63dc80fb1288d996c14d94abed65c5578478b7184333d790d841fafd38a3", "object_relation": "sha256", "Tag": [ { "name": "RedLineStealer", "colour": "#23a11d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770012345, "uuid": "78d0e4a7-a2e5-45ce-b4e8-7b2cf5bbc68c", "value": "T12C863300B247E177D16358721BFBC95B634D442713EBE98336E223F22661EA537A62", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770012345, "uuid": "29f1639a-fae0-4fac-9734-60238c62097a", "value": "bf5a4aa99e5b160f8521cadd6bfe73b8", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770012345, "uuid": "a4c2572b-a27f-45d4-8b1d-c2b547132251", "value": "196608:48NKJViUNfK6kJD8JcOpUIMmdrQau7socD+TzIKu+xPvqbvUHWN5k:BNGiU05JD82OK64bcMuSaQb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770012345, "uuid": "ab1b0d8f-94b4-4f18-8641-18a865ba274c", "value": 8537088, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770012345, "uuid": "9a90595c-f824-4696-8c5b-bf2d9bebc715", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c4f90f4a-fffe-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013013, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013013, "uuid": "bd1dfbb1-fc70-4e18-a172-2db2b198bbb5", "comment": "Malware payload", "value": "f3b3bee448e73dd270cd788b5195b1cb", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013013, "uuid": "6491cb6d-09c9-4667-975e-1a68784ec250", "comment": "Malware payload", "value": "19e375f2a5d0a9f39cc0864bf7300197ff69f1853925d77230ffbb9e15a09a08", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013013, "uuid": "c96cb1d4-67dd-46b5-8482-ef58d02eea22", "value": "T15CF31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013013, "uuid": "94c5896f-edab-45f9-bac0-2054732cd641", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0f:aru8GPLMWLasHlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013013, "uuid": "4669225c-7af2-46d0-b0fb-c9831f70690d", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013013, "uuid": "8fa9cf39-55fb-4760-8614-fa45d7eb86dd", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c77b0946-ffff-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013447, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013447, "uuid": "7d9f01d4-4986-41c4-8a0b-74fa815c3854", "comment": "Malware payload", "value": "12dbb3d87a51f1ce9b6a8dc67c6e6cc5", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013447, "uuid": "2bc6952a-ae53-40e7-9b5a-3e472a293628", "comment": "Malware payload", "value": "301190fb054b34bafe50a1358b993c05b92909d7b6c3855b4cc2c585a7a36377", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013447, "uuid": "410914e0-4457-4490-a3c5-6f0b0c3a0071", "value": "T1D2E02B48F8824CBAF47C4CA8FA9B2947D55FC7590D4211C95681111BF4E5DB0A122B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013447, "uuid": "579d5ef0-5b50-4d81-b4bb-4b032e8c9cbb", "value": "6:/VJ+pUKUFAmVYsZJLUPYjFzxEIonF+3FYKo1KXGVKGuWOXqIN3Ikr1IEx1IQ:/VJ+3mboYjFzsnKo1fgzWs3rN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013447, "uuid": "bd6035c1-acb4-4b5c-8cad-ea335b6da421", "value": 292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013447, "uuid": "c5f75985-b95e-4a2b-abe3-488f14288602", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33913efc-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "95338391-ab55-4469-884f-bc407596ea12", "comment": "Malware payload", "value": "06a4fab3775c613c23bc6eff44111402", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "4ab16ab3-5a42-48c5-a703-47deb7cc5415", "comment": "Malware payload", "value": "316a4c3cdf6665372afa9b3037f0c0ea69e31d597e6763824bbf2e1a865df8e5", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "71dd2a72-fa68-443c-86a2-561eb8246218", "value": "T1B1E45BF8B70EB655B9FB1F1085090B8ACFBD56CBA25604D47EC5F965683E00E807CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "71bb6554-2b9c-424f-b5ad-b7a7e1c6c264", "value": "12288:wER9U5Gn8krjIVZjasrSwYjqpfxRhmxlg2MBXi7iASSSSSSSSSSSSSSSSGSSSSS+:w09U5GnZKKwYj0fzAxNMBXAiASSSSSSy", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013629, "uuid": "fcaed040-d6ed-4b55-ae82-a7fd274f55bd", "value": 657780, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "93aa2722-5983-475b-8689-095446b58dec", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a20f41-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "51320f1e-0a71-411f-a80a-07946e049b92", "comment": "Malware payload", "value": "f4b2a80188f9a9c13864579d308500d3", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "3f2de5cd-cad7-4e1c-b09f-8c05f088166a", "comment": "Malware payload", "value": "ec2218b5e80f223baed38cd3ae9849d6aca328495d607f67695f3c3a3a3d1d51", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "ec8ce5af-86bf-4930-aa6b-6ba0aaae2a7c", "value": "T1C6D45BF4B70EB655B8FB1F1185094B8ACFBC52C7A25508E47DC5F965687E00E80BCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "c7dc1e6c-afb4-4dcf-9842-91d3a1d5a84f", "value": "12288:JcmWu48N/kSomoeiwBNaoI8OdCDyc/n/14lL8pjbAl9kyafEnES1shrFFkeQT9Ir:JcN8N/kSomoeiwbvOcDRjyxE0shhCbTA", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013629, "uuid": "e4529daa-c3e2-4238-b65f-1d67d64b1de4", "value": 646664, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "c14d5d0a-11ce-4991-9ff4-2809aaf06c28", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a510b0-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "2f783355-2e40-47a8-a2fb-222a95039895", "comment": "Malware payload", "value": "254887a89a8a4988dcce440f3e976fe1", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "7586fed1-03a6-43fa-9ca1-9d5c23e70d46", "comment": "Malware payload", "value": "08d37d439d92cc579096772f083a8a230785eb66a5b1bccf0771d92a04cbed1b", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "9f63e594-c87d-4997-bcd2-e47877d5177f", "value": "T131E45BF8B70EB655B9FB1F1085090B8ACFBD56CBA25504D47EC5F9A5683E00E807CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "19b80ce9-58eb-4732-ae5d-2c86d8afb072", "value": "12288:wER9U5Gn8krjIVZjasrSwYjqpfxRhmxlg2MBXi7iASSSSSSSSSSSSSSSSGSSSSSB:w09U5GnZKKwYj0fzAxNMBXAiASSSSSSl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013629, "uuid": "2a084d89-3ee4-458f-8f67-bd393f308eb8", "value": 657756, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "c3e6a391-2462-4baf-a433-7d3aa8665cb7", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a70cdd-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "466a6a9d-c977-4b1e-a974-8346af81d24c", "comment": "Malware payload", "value": "1f1479e6f7b1156ca26ae48c9d5b2f1c", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "3fbcc367-f5b0-4f21-af6a-28b5d7037f6e", "comment": "Malware payload", "value": "6e357fd3bc0123a4b672fb3f3a70349c3f95da2716adddc991b5428c15b5f0e9", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "c1eb73b0-aae9-4c25-91cf-97b222bae6f5", "value": "T181E45BF8B70EB655B9FB1F1085090B8ACFBD56CBA25604D47EC5F965683E00E807CB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "6f15d432-ea76-4f72-8583-076688346c70", "value": "12288:wER9U5Gn8krjIVZjasrSwYjqpfxRhmxlg2MBXi7iASSSSSSSSSSSSSSSSGSSSSSy:w09U5GnZKKwYj0fzAxNMBXAiASSSSSSW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013629, "uuid": "c4564fc9-2e7e-4079-bba6-98abfd537ba1", "value": 657788, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "9123afcf-6df6-4dfb-b629-dc442fa35030", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33a7b3d2-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "178f820c-7afe-4b37-840d-a2f07624ce91", "comment": "Malware payload", "value": "278120fef144ff2fe02479d9ffc44e93", "object_relation": "md5", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "523e3853-854b-48e3-9ed7-12a3df515972", "comment": "Malware payload", "value": "f010bb8e85cc8932477d7ce1243528096d3e45da3ca32ee2bfc5f76a4492d211", "object_relation": "sha256", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "a2a78ae2-a0dc-445d-a0b8-3377a061f268", "value": "T1DB6533789815FFE606353D31807B9C4D1D4FB3A7C1B886E9FA2648C6A574AE3FA480", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "30b752b6-6941-4b05-aed6-43b2991dbdbb", "value": "24576:1CV0KVD/HhRoOYjtHZQmIOzZUcROAP5XeSaAmrQjTiolNus/FWOKNNTUfnsJIA+i:1CiKV3oOuHZSMOAheRNQjTiadWOnfnsH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013629, "uuid": "31c90de2-3750-4860-a548-f7213cfea73b", "value": 1434070, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "7f52e5d4-7d2b-40b9-a2b4-55b27629b6b6", "value": "image/jpeg", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33acbe83-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "fd74e13b-c38e-4154-aadc-599c2303d28b", "comment": "Malware payload", "value": "f15a25cd71cbac1c1b445938fd107b80", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "5f538b95-0132-44e0-bc61-dc6fd39cc4b5", "comment": "Malware payload", "value": "304366ba6b2eb2b8351b59f401c63c431d844aa5157f171d8f22ae0f04d5ee09", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "acc4a62d-921c-4a39-9b53-b89df156cb97", "value": "T1A8046C7EAB71DAC62A9F395CC505134DAC08C9AFE7A500E967C7CC3990764484A78F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "1b84a2f3-1ae6-47fe-8f7f-3055ac21e597", "value": "3072:FfzwwQDz3ibQBWB8UMJ7DKDuGBWSj1FGRTi6MpYVIiHahuOuW0KS:FszzyYK1MJ7DKDf0Sj1FGRYp6IyaIOu9", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013629, "uuid": "d7670307-b1c3-44d0-94bc-1289989d2f3c", "value": 179512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "ebe03db4-0a83-4ada-88ac-2cdd383e3d94", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "33aceb4f-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "c7205c0e-dc89-4cd8-92e5-ad320b99944f", "comment": "Malware payload", "value": "ce6fc9b70e5543d7c1c7f2eb9f457a45", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "cc077133-29d2-4d30-b85d-de627b7adc56", "comment": "Malware payload", "value": "dedcd5f5e03029d9ce098f2a4187cb7be60b12724d6b310e125fd628c0a6fbd4", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "c905f660-1990-466c-83ae-9bb9c360bc47", "value": "T12C548FF96567959925236A14B868138C3D34C4EF5AB88BC56AD2EE7334F2C4E103F7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "1bcf700e-1d35-483a-b848-88903d064a5b", "value": "6144:/3rA353a35ts7STBNMESMECA/4TW00jh1tc54tVlOAXd+K:DguT/MT0A300d1tc54N", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013629, "uuid": "032fcd54-2b4d-469c-a996-00fa500d32eb", "value": 282428, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "a46d966b-2280-4604-b0db-14f917eeab7c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3410a47f-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013629, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "58c8921c-fa86-4cd9-8740-4911dac4f29e", "comment": "Malware payload", "value": "74cbb485c0444d75d6655b4713e836e0", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "030b9246-b8be-45d6-bede-d6f988d87b4e", "comment": "Malware payload", "value": "98067faa264dc7f25e9754715e22c9415264b9ca95b35cfe309a7629fe9ea13a", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "39a63559-9287-4a53-bff6-d1cab4e29ff7", "value": "T154D45BF8B70EB655B8FB1F1185094B8ACFBC52C7A25508E47DC5F965687E00E80BCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "35d93d10-4230-4a9e-a0b3-13dc9e3098be", "value": "12288:JcmWu48N/kSomoeiwBNaoI8OdCDyc/n/14lL8pjbAl9kyafEnES1shrFFkeQT9IM:JcN8N/kSomoeiwbvOcDRjyxE0shhCbTD", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013629, "uuid": "4fe77e50-c338-4551-a57e-5b57304fa7ac", "value": 646680, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013629, "uuid": "dff12b65-a94e-4ed0-afce-ff019a4f0924", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "347c9b3f-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013630, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013630, "uuid": "18fa0dce-3be3-4726-81ba-67f54a5e01df", "comment": "Malware payload", "value": "08073cd421afa6f22c36e8beffb6121a", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013630, "uuid": "3831bf73-8e8a-4f09-85a7-22056f79f089", "comment": "Malware payload", "value": "02b9669b41336b8420b4b0d83822d9232a1fbbfb23b996519dbc5b631e3ca007", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013630, "uuid": "feeaed22-3ccc-481f-9bd8-cdd2dde4eeaa", "value": "T15FD45BF8B70EB655B8FB1F1185094B8ACFBC52C7A25508E47DC5F965687E00E80BCB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013630, "uuid": "74de17cc-c792-4afe-9912-557442fca955", "value": "12288:JcmWu48N/kSomoeiwBNaoI8OdCDyc/n/14lL8pjbAl9kyafEnES1shrFFkeQT9I9:JcN8N/kSomoeiwbvOcDRjyxE0shhCbT2", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013630, "uuid": "6e167854-8b8d-4c47-8bbb-3c6793bdbf31", "value": 646668, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013630, "uuid": "0bc5f88d-fa99-49d0-a6eb-6c9b3e3d7ffa", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "34c013dd-0000-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770013631, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013631, "uuid": "80d62c7f-3d64-4ca2-93a6-223f63103ec2", "comment": "Malware payload", "value": "a96af48a74c4b052f11f6ec6269c0008", "object_relation": "md5", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013631, "uuid": "f91e56bd-77c5-43cb-a2bf-03bab8125a5a", "comment": "Malware payload", "value": "cd817aa081299f91374034febb7a87d9a07de869805899d375cbe2691ec464f3", "object_relation": "sha256", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013631, "uuid": "70931aa2-0a8f-4ea4-b5a1-edfde1e08b9a", "value": "T10D36CF7B190A6EBF4EBF3E14D4140F4E8C28F857532C82E8BBD2A57582F25049579E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013631, "uuid": "b735f8d2-93b6-4322-9c74-6efe29c4d607", "value": "49152:AbmkrxhdZw5MNyr/ElYXXe4njLJf0Sa3lZUreJp6MIk:s", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770013631, "uuid": "55be6c0b-921c-4c0b-a569-38c01a08c806", "value": 5085280, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013631, "uuid": "ff78f3c6-cd36-4dcb-b2a3-5a4005b4f76c", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "cfea9175-0004-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770015609, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770015609, "uuid": "a19c24e5-63ca-4c4c-9d1f-4ec3ada0820a", "comment": "Malware payload", "value": "c60862d60b064dfb909dba19d4369a24", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770015609, "uuid": "375cb072-8149-4c16-8a1f-7a5f34cac5b7", "comment": "Malware payload", "value": "9428a9f5a7c3165b09f70c0b60a1e7dc6b47936ad811efcbaefcf47c198b4c29", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770015609, "uuid": "0862d64f-f5bf-4cc9-8ee6-957d9ceb832b", "value": "T16324CE3BD1D82E895B66FA74D91317348D20EED44B7342FB111B2E238ADEB14909BE", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770015609, "uuid": "700e7ce3-2bd3-4128-8bbb-2c1a1ccf3044", "value": "6144:bA2j1zbWVQbzH6GcSSlfSE3FVWI6egNGx9h:b1jlqiH6vSSXFVWCgNMb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770015609, "uuid": "4715b52c-363a-4587-93d4-00dd41cf2e17", "value": 213061, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770015609, "uuid": "5bfe00ee-ab51-4c23-9a85-adc47313737b", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ef442809-0005-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770016091, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770016091, "uuid": "09ac301c-3b13-4786-a120-3c8868267703", "comment": "Malware payload", "value": "88ec2d64afae32705848de799268d2a6", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770016091, "uuid": "aaee060c-0e81-4740-a0d9-936fcd37d522", "comment": "Malware payload", "value": "7a50e07adecccc27ebc59f3013475208b3b7cae3924e6272315c89b39d5cb437", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770016091, "uuid": "ee914553-b825-4300-8d78-7c8fab13ab0e", "value": "T19834F068274C97A3AB03FB6DCB4FE2AE3375C6DE1B2ACCDD6C84A353341010B96525", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770016091, "uuid": "63f38b54-35d2-4d90-ab60-9ef1551274c7", "value": "6144:t5ySWNvsBREjKwyBn94tAHMs+BqRE1b4IuQpSYjsvW:t5YNMRE25CissMfAQQYSW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770016091, "uuid": "e5d6ecee-215f-4682-a9af-568890f9814a", "value": 239700, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770016091, "uuid": "001b6bc5-fbea-497b-84cd-d95b36256b5c", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ead5ae46-0006-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770016513, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770016513, "uuid": "8940608b-38a7-4ad4-84bc-fbbc3a6ebcc3", "comment": "Malware payload", "value": "af5a88a1cd30e1c41098598a56869cda", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770016513, "uuid": "dffcce05-a276-4324-addc-e2ed80b82d98", "comment": "Malware payload", "value": "3d91a2be306fb2f5ab9af2fc10bb20b30b9e4819177fe3c0d241b244e7610ee1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770016513, "uuid": "465f1261-1470-478c-be69-c02e959a6c5f", "value": "T10BE30A7F83F6313572038359F5A2A728969DC233EB410EE2F9B69A9C8FC11A141771", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770016513, "uuid": "73737dfd-e296-41e1-89c8-9673096cd3c6", "value": "768:EZdapETArTWlGRNjcXscJGcz74k/tHcTwADnsfifRfiVIrePfHKIYW72oFSnUh+u:Eap9ryl4k2wUnoIrU7IrA4Y5hJgC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770016513, "uuid": "71d5f0d6-7ee2-475a-8f37-4070aacfabc7", "value": 148070, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770016513, "uuid": "8388ae3c-ae01-4510-9b52-ea8413edc2fa", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45088c39-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "acd0f9a7-5ecb-4d05-b3e4-391bbfc0b442", "comment": "Malware payload (Mirai)", "value": "e4c3bb5e8458b27e677b1ebe8e63365a", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "af61bc4c-af48-4a4a-987b-765048cd0394", "comment": "Malware payload (Mirai)", "value": "9543b667054814330b7fde0d95dc2f05442fe377943c8b905b346ebe098f7e7a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "84176f6d-b789-4849-b544-3ed65a5c7e68", "value": "T1B0C3F80AEF614EFBE8AFCD3706E90B0525CC555722B83F7A7574D828F64A14B19E38", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "3b8dc3d5-bdcf-416d-a158-1903b08a786a", "value": "1536:Vtp+MrM/NBHXC46HgOER1c+vjIiHsLKV2VrCmKmfIZhIH+cPohE57UNL8ef2:Vtp+Mr2z6HgIZCmFfIke2ww", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "1cefe46c-576f-4265-a7a0-c1f1717c452c", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "269c1713-7035-42dd-8d20-02593a1ac729", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4511e400-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "e47879a4-413b-4bd8-9bd5-590f8f27521e", "comment": "Malware payload (Mirai)", "value": "bf1bca85c882f8aede2137b9767bcaa1", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "eeb2bdc5-9da2-4005-8f71-b4c6178883f9", "comment": "Malware payload (Mirai)", "value": "83e83efb39a04fc24f4836373297619f15b89a2d433f9f09d37880889339faf5", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "893fc918-5af9-4dbe-b587-1e9ba9fb2766", "value": "T132F2E164134979F6CDF4D8B5049903D1FCAE0AEBA0832C497F42DB9199864B4782EF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "94d1beda-b37a-4031-9713-223463a32cad", "value": "768:z4YCUdyirIOJkNHmXbw1yuwL/Ob29ivZv8JLevoXyMdbXR/+UU7JgGlzDpUYsM:z4YCUdmHmXbSyrDe7Zq8oZhmhxVqYr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "5c058098-464a-4980-a52b-bae8431d965a", "value": 37404, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "564782d5-82ad-4d9c-9d05-d91537180b37", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "451620ba-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "e12ae5a7-7155-45bc-ae3f-5542e3b66e03", "comment": "Malware payload (Mirai)", "value": "030c6cc5fcb9f7da520b7c1655e8374f", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "a694ae4e-f709-4f65-9c2c-60084b342fff", "comment": "Malware payload (Mirai)", "value": "518cdc5821ac9722a477851a93debade9ce6495157fc5ef4aad52abc86899770", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "5e9ab687-72d8-4791-9860-50e9d27acbd5", "value": "T150F2E1F4D4D39DC2FB1E0D7E92E7EEC123E18B9E35158EE16711A924E114236630AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "0ccfd43c-867a-4727-8e89-e007acec2051", "value": "768:dwcRe6OKJ0EB4TzuhII1E2XmGZKH4XN0A4uVcqgw0RTWXK:dwEpB4HqIqE2pKH4d0A4u+qgw01WXK", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "53769d84-bd14-47bd-9e3d-4f3a3ef1cbe3", "value": 34532, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "7790b2cb-97a6-4a93-91b6-51a7952b0c14", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4517c266-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "00257a84-47a0-4a2a-a762-c4147aee1735", "comment": "Malware payload (Mirai)", "value": "9c8ab49b8a51f8e4b7f5f4c72194d84e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "1e136658-d348-4de9-ab89-d2bb934bb111", "comment": "Malware payload (Mirai)", "value": "dacd2323eb258ceed0fd677209c1aa619fe1ec391b6529ebf827291d889f269c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "c6e0c038-a5e0-4767-9d42-86ee45162780", "value": "T11C03F18EC6806DCECDAD18BDD46912A37D2CB6B1F06F934C7B98485497AB707F7898", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "33a3e3aa-e5a7-41ca-9370-72687bfe3f8a", "value": "768:xVGbN66Uc5nO7/mGd32ZyE5NViLBbDtQB6WK7O8flXthElEWMK:abN6iY7t2oEZixDtQAjrflXtClR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "2632f436-44b7-4985-a5c7-310dc606efcf", "value": 38880, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "1a7b50b9-ef93-4804-9466-0e1a8540d4e7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "451bf1a7-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "67c26c62-6535-43af-833f-beaab4432585", "comment": "Malware payload (Mirai)", "value": "c1967a12e18586ab11fb9012c6620fb9", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "7622d93f-3dd3-4051-8cf8-f92f02729c33", "comment": "Malware payload (Mirai)", "value": "5710508fc2266684350b8e97d35eab032158e147675ffd025a9051a5e3a91882", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "6b191b5b-2435-45bb-9939-0e814514ade9", "value": "T16D03E1D18A31F1BB9EE01935E4351155A3CB1DBDDCDA773B0B189AE43A6400BE5FE8", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "1f738430-0daa-4575-a312-b379b92bcd73", "value": "768:hKQdqvAQ0EZ5gkwWF6yUKTL9pHNOWxSGTt2kefJz/xPsjcUQ14V+Qq3UIqA2:9fQ0LkHhXZOCTtMtZPPUS4V+ni", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "d8c94bbb-e54c-442a-a9e0-49e3437e894d", "value": 40740, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "6300830d-a4dc-4682-9c0c-c65b72283d2f", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "451e54c1-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "617d5be6-aa45-4dc6-a402-2534bc975ab4", "comment": "Malware payload (Mirai)", "value": "1af277d697f9019bab81b77e720d48ca", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "95ae8f70-b969-4682-b4e2-eb47c4bac6e2", "comment": "Malware payload (Mirai)", "value": "e4d593ef18150e9dbcd072104fef9449b7353ecf47665addef556b8f698fcda6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "cb6680df-667e-4631-b9d0-ac4fec52fd4f", "value": "T126F2F1F386521872CCE02E72EA8E41C3225F416459FE3D337B6E0A5CA5A206BCFF51", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "704fe770-bd02-4055-a2e7-a811c16f6937", "value": "768:iQmzYjFPrLVvwh8KyE04om+kK/gWS5x/z8SR/dN9qj3U7m:iQm0pjBIhFr04pbKoWcR/dY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "75cc689b-c2fd-4375-8cb9-3068e2eaa75e", "value": 35800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "d80920fb-c49b-4707-bc2c-ad2f2efa6142", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "451ebe8d-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "c964e6e5-367f-44e9-bfdc-6669aed6e8de", "comment": "Malware payload (Mirai)", "value": "15dc8d5ef0ba4b8e274cd8ee53d320b2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "a07a6ed7-0cee-4780-ba3a-ebd354446d9d", "comment": "Malware payload (Mirai)", "value": "6d73ceb02738658d5db6b2992e0a41b75c72b5fca641cac8b7f264a84b9f4961", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "344bc6bb-f616-4781-8fa6-ed4c642d6847", "value": "T177F2F1E9E382C791D1A6953BA41F358C0C547A1E80CC92E5EFEDB171AAD3AAD3C195", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "9a1bec10-f76d-46b4-b0c9-2e5e19f8f9ee", "value": "768:sEoOXG1uDf3CSAtL90WEu+bkKnEq+67FVgH1rArnbcuyD7UiyqE/:sEomHD8R91+AUz8ernouy8ZqE/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "9ec8ef25-765e-4222-874b-8a42b45dedc9", "value": 35388, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "f809f107-09ad-4ef5-9e7f-79176c862f28", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "4522e514-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "9db81bb8-f102-44d0-af6e-6564e01a096c", "comment": "Malware payload (Mirai)", "value": "b323047b692e64cd1ef73d738b2d0bfa", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "fb35ccc0-cf44-47b5-9440-b668b93c4ecd", "comment": "Malware payload (Mirai)", "value": "17b01dd5eddc332e7990e9f8db3e491336f6ed82575b520944b4845f8c87acb0", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "1a9ec4d9-9cdf-4874-ab87-f8f5285e40ce", "value": "T130E2D050E098A5B6E0311D3AA52C8341936BD7CE79E1712B5BA48EEC3A821CC07F58", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "c6cf6334-4b4e-4a95-9b00-86f6db9838f1", "value": "768:8Pu8uCkFSMTTb6j4Tqud+uxLc8I+JZPj3K3UOw:8nunbZxLz73h", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "c403cff0-f64e-4091-969b-983f27dcde20", "value": 31892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "7452e67a-06ef-4636-ac59-7330a11dcec8", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45233836-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "201b1f50-5c50-42da-88b6-2da9eda08932", "comment": "Malware payload (Mirai)", "value": "f729e4290551053d9dd9a3b7521047e2", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "a46a67b6-60a0-45bd-9852-5075b0b60f35", "comment": "Malware payload (Mirai)", "value": "e47873d53d6ba6350bc162db6415c037005a022c0c6055617820f447bb9009e9", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "804f9ddb-67f0-4681-9142-fd1a98e07084", "value": "T10FF2E181506D8754D804E2398CC979C19C70B90A6B1C1B72FFE82FAF9C73E69659E3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "a2aa7eeb-a115-4331-b022-b9b37ea3712b", "value": "768:tu0/3BHQdHqsB+2/Asl3wLV1rOAetjws61RM4nbcuyD7UfyqW:h/3BUlB+2F5wLHr5etjwjlnouy8qqW", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "cf39509c-8479-45ec-88af-25b61e307f26", "value": 37476, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "8951906e-cc68-4ab5-a408-8348cbfb21ae", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "45258bba-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770023536, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "7f740b9a-8446-4123-9a71-67c86e13f165", "comment": "Malware payload (Mirai)", "value": "667ce2341b3a74ea80a879c232be216e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "88fe99c6-5960-44a2-9149-d0ba634fc524", "comment": "Malware payload (Mirai)", "value": "76e1d731753e536ee745a38ab0d514ad3fe13fde16e7db8787f501b1258945d2", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "a6e4525a-d950-400c-906d-3c73f3e1e352", "value": "T1705302134E83DB129004007D6E7A553BDFAD6939C1AB3963FB67B1D8237508A67CBD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "0bcbdcb2-7f5a-474c-8bbf-6e41cf797132", "value": "1536:1juSEUyYdjNvfaxLF1og65lUO+UnTr8oEMjfL/tp1O:1d9yYdAr1og65ld+UnlE031O", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023536, "uuid": "d9e47f02-1158-411f-8776-5f5ff28c307b", "value": 60892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023536, "uuid": "0b60aee3-2b3b-499c-a6da-c8e73094f1bb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1600033a-0018-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770023887, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023887, "uuid": "80c73ecc-a705-45fb-8f55-59c9e310c0bc", "comment": "Malware payload", "value": "551229129603f80467623571ddebdafe", "object_relation": "md5", "Tag": [] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023887, "uuid": "66e6ea0f-6f75-4f86-95e0-5b89000a1056", "comment": "Malware payload", "value": "05e47ff81ba4ef1c7500a1443f164d5a86e7a347c471852126cd2fd6db536c7c", "object_relation": "sha256", "Tag": [] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023887, "uuid": "273d5e3b-b6e0-484a-8cc0-9d74c928eb64", "value": "T1D1B5EF01BB989E1EC877A1360C4A5631615AED23CB13C387D9B82B5D28BF6F44F057", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023887, "uuid": "d1ed483c-71a5-4c36-8d1c-a28f1e401ffe", "value": "49152:2b/DbGHOvOp3/8jQ2uYyXx4E3H58gbsXja+of:aOKOpj2byfX58zX/of", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770023887, "uuid": "142e16a5-56bb-4070-85e1-31a6a93b9787", "value": 2420800, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023887, "uuid": "f63feca5-f8f2-4942-b1c9-7c520bf23e1d", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "dd272afe-002b-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770032381, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770032381, "uuid": "95ebea0e-2fc6-484a-9925-92573278bb3f", "comment": "Malware payload", "value": "4b9db0a9509148c68b47e124920abfe6", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770032381, "uuid": "4ba7b361-14f8-4e79-b13f-e1c79cdf4734", "comment": "Malware payload", "value": "2972462e862d48fba8a45445fb095eb9b46ce454eadc75a40abd4aad808a4d77", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "NirCmd", "colour": "#9081ea", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770032381, "uuid": "53c8e449-f924-49dd-8482-9c730db90fe8", "value": "T1F10633017DC68972D47314F30A3997A2667DBE10BF34CDDBA7812A27F6760D0EA306", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770032381, "uuid": "b2cbe300-1276-4731-bd5c-f7b19ba8952b", "value": "12e12319f1029ec4f8fcbed7e82df162", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770032381, "uuid": "e07bfcb2-d50d-4fb7-a5cb-a98f7a8a3f69", "value": "98304:aIT3R4w3K6tZSaMSs1eJMn7w08BKAqffmjz:r2w3E16MiBrUfmH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770032381, "uuid": "29468266-764b-4cb4-a928-bc2b756b9e5f", "value": 3779612, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770032381, "uuid": "027d1877-1ad3-4102-910e-8b97d4f21de8", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e3dbf54d-002b-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Adware.Neoreklami)", "timestamp": 1770032393, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770032393, "uuid": "bcb4e750-e127-44c0-bcc0-22dade0169f4", "comment": "Malware payload (Adware.Neoreklami)", "value": "aea6e09c69380fbab9bd5c90ffe9d2c5", "object_relation": "md5", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#29eb4e", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770032393, "uuid": "945f1bfd-842b-497f-acd6-20fa575b65aa", "comment": "Malware payload (Adware.Neoreklami)", "value": "cb1e602f8332f669aa28c929a862cfea0cbdcabde1d61a3af104ddb8da1bdb40", "object_relation": "sha256", "Tag": [ { "name": "Adware.Neoreklami", "colour": "#29eb4e", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Stealc", "colour": "#291416", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770032393, "uuid": "027f80e1-c748-4c9a-a194-f7f6ba172895", "value": "T1727633387EE58D76C30B493B8ABDFB6891DCD3600F3596A37F20851E0519D29E16C9", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770032393, "uuid": "fb15567c-bfda-4d09-ba8b-45797ce2515c", "value": "3786a4cf8bfee8b4821db03449141df4", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770032393, "uuid": "32d1e0a2-e83b-44ed-8990-0f0893e4a005", "value": "196608:P1OzlijvHf/BSqp2G4Ut/YmFjZefZ7a+GDk0/:tOIVB2RbmFdeB2Dkg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770032393, "uuid": "ed123684-ef99-43c7-acd4-a0cd87583080", "value": 7505133, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770032393, "uuid": "731de006-eeff-4185-bd6b-c91ce4cd3f36", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "102ab124-002e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770033326, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770033326, "uuid": "82ce64fc-652f-47d4-a013-01e84005ab83", "comment": "Malware payload", "value": "536074636069a3a7b48eda9cf71e9fba", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770033326, "uuid": "d1b5c6f6-81c9-46d9-bc19-1cf58b75adae", "comment": "Malware payload", "value": "22b7ba1881cd46821c173c5e104efbdeb693c65c9b70e84aa1652c8c7b3a8786", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770033326, "uuid": "37882e11-84df-478a-a440-b0640630aa3d", "value": "T15724BEACF35100C0EEC88B16EDC5E32851F6E15C40E5B631AF126EF9C89617F5AB61", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770033326, "uuid": "c9533b8b-1825-44cc-826c-9d743124a2a4", "value": "6144:ws+MoaFNvrELERNLkJrHxrufQQ7qScoRbkKaNLLLLLLLLLLLLLLLLLLLLLLLLLLd:p+Mo+nNLkJVruB7xrRb8R", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770033326, "uuid": "bf26eed9-9fd7-428c-8a9f-2681bb9dfd77", "value": 213568, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770033326, "uuid": "fe74f87a-81d1-4e8b-82c2-98a93c2790df", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b46be78d-0030-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770034461, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770034461, "uuid": "236627b4-4603-4cc1-9e97-efed787ff43f", "comment": "Malware payload (Mirai)", "value": "c59c99edbf62615373a68614e65e355f", "object_relation": "md5", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770034461, "uuid": "9f835011-a158-4b7f-b63e-074d08fe9df9", "comment": "Malware payload (Mirai)", "value": "6e50030e3623017ae63a0a237c4a98e8175566a096d2f710e9eb72a1fa899542", "object_relation": "sha256", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770034461, "uuid": "8eab8276-be19-48e3-89d2-4b42aa2f578d", "value": "T155B30859B490D727C5D4263BFBAE110C33325764EFDE33068D086B343AD7A2D5E2A6", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770034461, "uuid": "addd815b-4c3d-4715-ac28-0b8323e9fcb1", "value": "3072:amptOgTeTPiPhLbvhDfNfsfwzjbrhWcNCPdbNndHChtvFHmv3:aAtORgptzj4pClHmv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770034461, "uuid": "f51b5f10-eca1-4b85-96fe-79e1c83cc906", "value": 109596, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770034461, "uuid": "f9650c37-c7f7-4a46-80c4-c5a8e400682f", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "05aba867-002e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770035587, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770035587, "uuid": "1327fa9f-d923-4bef-ad17-c1fbce76ced2", "comment": "Malware payload", "value": "f8ffff382a068f61ad58fad1a63d0125", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770035587, "uuid": "fc2b042e-6661-4808-aa46-1a5388dfee4d", "comment": "Malware payload", "value": "4a81ab3bea465885236a40bd0fe6356995a1a350f49b737ec2c7f51a4003c029", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035587, "uuid": "384bf801-337d-4f8b-9ec4-12cf19125e63", "value": "T10CB633EB80269BEDE0A4F5F8585EB7484791950D98105ECEA33B7022EBF43CDC5627", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035587, "uuid": "1070e42d-e15d-401e-8d97-02f55298e4f8", "value": "f4639a0b3116c2cfc71144b88a929cfd", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035587, "uuid": "85935b7d-9468-4850-8695-b0b0bcc11abf", "value": "196608:0N70yAyMGw8icP4he1Wl2kbp7rb7PhUM7eaT0txh/19fw7ww5tul0+OVFjs3o:0mOw8icPqeC2k73Xl0ldpwMEul0+I3", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770035587, "uuid": "d3f8c2c7-6ea8-4059-92a2-4fc81f204341", "value": 10927688, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035587, "uuid": "ed8fb6b9-6b1d-4cce-9d4c-3c97563a2d97", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "77cac85a-fd0d-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770035701, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770035701, "uuid": "fbc2090e-d47a-467a-b330-46b0d16d4aca", "comment": "Malware payload", "value": "d0f32d10dc4668da07b26727c7d459cf", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770035701, "uuid": "d298c0ef-9683-472f-82d3-586320c69406", "comment": "Malware payload", "value": "c5023ff4f672ed0f025f894fa74dfdcb29570006dbadd12ab87790200e0492f2", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035701, "uuid": "2996f3fc-38c8-4f15-ac13-d619a84b474f", "value": "T12631C865CA16A057DF663A7E11F2DDE2C6A46070943430B3D9AEA2222D415E73FC43", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035701, "uuid": "13af8741-b5cb-4bd1-8a74-2749908b0f1f", "value": "48:962QjELSZQ7mydOED6ufLVfA3nI5Zhr6mc:oNj59f06ufL5b5Hrc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770035701, "uuid": "0367c27a-5e4a-49a2-92b6-fd513261a850", "value": 1608, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035701, "uuid": "b7426ed2-eef5-4500-a8ba-de39286fdd2c", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f35d602b-0033-11f1-8b2a-82aee05be84a", "comment": "Malware payload (CoinMiner)", "timestamp": 1770035855, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770035855, "uuid": "1c61b70f-4595-4993-8709-ffaff447fc5d", "comment": "Malware payload (CoinMiner)", "value": "740525bb31218479797abcb3c4d8bd72", "object_relation": "md5", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770035855, "uuid": "604e42e9-fecc-4a4c-882b-979b8283321c", "comment": "Malware payload (CoinMiner)", "value": "52c9e5c012e5318737516d7aa061f66323d91012cde7f90faa70688dc2969760", "object_relation": "sha256", "Tag": [ { "name": "CoinMiner", "colour": "#b47064", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035855, "uuid": "387548f6-8702-4854-b63f-792f9768bee4", "value": "T1BEF533D4B9822CF4E777AB30D52A4F1CF22031B58F525D9B0176A5903E336E69E2B8", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035855, "uuid": "d6b9abe7-42ca-4397-b4ea-0013f8b46ad0", "value": "3641b918fa6fcd6b6754b75fd2065c00", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035855, "uuid": "b5d3c7c1-915c-4179-ac64-b65f28f2a29e", "value": "49152:aR+v4xIFiz6E2W3bFvuGuoDD4+phI/JV93/yOpWaHSAMGVyMC4WgAj6Vzx8:k+Qx6O68qu0+6JVh/yeHsZZ4WgAmzx8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770035855, "uuid": "edec92ec-c080-4633-be76-1721e37707f9", "value": 3443512, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770035855, "uuid": "4da8a3fb-fd09-4ff1-99bd-3a6d3ddb6612", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "74c80cdc-0034-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770036072, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770036072, "uuid": "d793a5f8-1bdf-437f-985d-a5ad979e84da", "comment": "Malware payload", "value": "016d523254b4f0d78c93c3b97d3caa1a", "object_relation": "md5", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770036072, "uuid": "2b04f8a7-47f0-4802-ab71-e5e72f2f1819", "comment": "Malware payload", "value": "86c5ab109055b89542943864db328050759aa345a49232b9a498b4cc70399ef2", "object_relation": "sha256", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "Formbook", "colour": "#7893ac", "exportable": true, "hide_tag": false }, { "name": "powershell", "colour": "#36750f", "exportable": true, "hide_tag": false }, { "name": "ps1", "colour": "#7b6e87", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770036072, "uuid": "e7834a58-27ea-46da-9a4c-8f849768a967", "value": "T179750111E926EEA2055C802828A65DCB25500CAB5C55BBAA3F8F4F8D0F6F25FD0753", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770036072, "uuid": "e009b82d-08a5-4ff2-b2ef-b74cccb9419b", "value": "24576:UsvdRw8LXg40d7tCy+l20gd37waG4q1qimolXZSsSJt58R17a1EOTBtrnlPZ+:vDrS7V0gdDjEYJ78R1eTLNZ+", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770036072, "uuid": "44b341e2-e615-422f-aaf3-5e0fa892eea2", "value": 1682633, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770036072, "uuid": "fb3a2b82-798d-42ae-b1b1-15c489ad83a1", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "7e5dca4d-0034-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770036088, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770036088, "uuid": "9a534b4f-bb47-4b33-8ad9-527534d604a7", "comment": "Malware payload", "value": "d3595a31959c9c8071bc53a72b71ae47", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770036088, "uuid": "4f84ffd5-fb12-480a-818c-ebd0a5b0089f", "comment": "Malware payload", "value": "09deff813e0422ae052cfcc3b46e595640689a171182c7cefe6e69d678ff58fa", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770036088, "uuid": "08fa81f6-6bdd-4420-a6fe-0a7a60fd40be", "value": "T1F40423726BCC84AAE474E779139E87E315033A37A786043FE955DC02A102EB9FC81D", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770036088, "uuid": "45cdc67d-28a8-45d5-ae84-393257480310", "value": "ee53c10aff1d01eafea53328179e33a2", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770036088, "uuid": "362f93b1-a90b-4d7b-a025-adf5782bed07", "value": "3072:QgYeEOaN0vGnObOK987j+jINaChNFBwtrLQlHwYbjODS3OGhhBWR5xGKypHIWE6Y:QgWvO58/hNaM/Bwtrg6W/hK/GHi6Y", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770036088, "uuid": "39b69342-f7d3-41ba-9deb-b2b3743497c9", "value": 174080, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770036088, "uuid": "61391335-22ea-4f87-bddf-aa30de068a0c", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "09bd3ca3-003a-11f1-8b2a-82aee05be84a", "comment": "Malware payload (GoProxy)", "timestamp": 1770038469, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038469, "uuid": "380d79bb-a628-4562-bc78-f7b0ad6a113a", "comment": "Malware payload (GoProxy)", "value": "ef5e1e4e3db407d05dec6801077a285f", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038469, "uuid": "8a2c7f84-f17d-4b66-8d6f-87604f4acd27", "comment": "Malware payload (GoProxy)", "value": "576cce3bf9f3e9a7b8307093101c32ff401a3b03ea205b8aac986a2ae5fdc01b", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038469, "uuid": "902ca9d6-3b48-4c6c-ba7f-bc53fedb2d06", "value": "T1C1C67C01AA4009DAF26FD27753D366457736B4D923B137EB3AE8846304F69C02EFA7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038469, "uuid": "21443c9c-ab65-438e-8302-4aeaabb08b66", "value": "4035d2883e01d64f3e7a9dccb1d63af5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038469, "uuid": "7d6d5f12-6936-47eb-a767-e20fb5fe6762", "value": "98304:c36+8X3Lqkd/FyktTAhRjmfuICpVTQxDX7/zk3uix8sX86i:c36+8rfiktTAhNmWICpVTsDPkei+sX85", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770038469, "uuid": "014f090e-ff77-43b9-8710-f52ddb0201b9", "value": 12074624, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038469, "uuid": "5d9dff75-6c15-4c64-a8b3-63a34d9b8eb3", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "81b71a68-003a-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770038670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038670, "uuid": "4d6a5a81-2094-4b5d-ac15-651ca93cbe4a", "comment": "Malware payload", "value": "208457eb0faa1b097292b0b4077e7095", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038670, "uuid": "107c36f2-b0b4-4e6d-b278-795ce732f4a7", "comment": "Malware payload", "value": "6e436ed0a4c14a750e6725d474632f8703477afa5f350e5d86247e82b9b7ecb1", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038670, "uuid": "ad8055a9-dc1d-49a9-a77c-bcc40c984d08", "value": "T1EAF31A62A7B4197A23BB43BCE455F78879688523D74D62E1F8FEC19C42C1BD224727", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038670, "uuid": "e5143984-387b-4d16-be9e-d5d00fb783c9", "value": "3072:EdrK2iu5mGuE/kDkank7evQ+/s4oxY+b3wyAtA+3CWPCWTn5bXZEtUioCkdGas0J:aru8GPLMWLasJlH", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770038670, "uuid": "1531d382-7fc1-4217-94ba-e55bb4ce4314", "value": 159238, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038670, "uuid": "0cbf614e-5fbb-45e2-8334-ee313d686f8a", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "040523a8-e5c0-11ee-b38b-82aee05be84a", "comment": "Malware payload", "timestamp": 1770044532, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044532, "uuid": "659cbe42-a90c-4aaf-b765-43e1a3b2a31a", "comment": "Malware payload", "value": "724f25e7f93eae0ae54a80142e11b7ef", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044532, "uuid": "096ca5a8-688f-40ef-8e45-38d00a2f8176", "comment": "Malware payload", "value": "ab69ef32017a5365ee0e7faca03e1352382865c5672e989d99d2d77ec91c33ef", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "casdet", "colour": "#4f8a65", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044532, "uuid": "c1c592ba-f60f-42e8-93cc-b59e23ec63f3", "value": "T16D356D56F9808EA2C5D8177BB75DC35833534B78D7DEB102CD08672877AB94A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044532, "uuid": "e2aee990-8e65-467d-82cf-e8556fe84e09", "value": "12288:00Bw2wHeeJgR3asIAksAi0uObzkzOgFr1qwRcFjV1D7a9KbsaKjpeFmz4T28bLv:00BnRED/TwOjX0a5xTdv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770044532, "uuid": "f442596d-31df-49e2-8ea6-62d3acf63b88", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044532, "uuid": "5ca4736d-28a3-4702-b8bb-fe3c4856ea61", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044532, "uuid": "209653f3-1d5b-4015-8b69-dffc5405d14a", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c6b53292-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1770044533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044533, "uuid": "b39a59fa-b710-4a39-8cb3-6907c013b70c", "comment": "Malware payload", "value": "ba5d73d924d8f25a7d7aeee4bf7fe6be", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044533, "uuid": "71d11987-6d7b-4e53-b1e6-b892eab5954e", "comment": "Malware payload", "value": "7ccd748e7cd3cc2cb747b87bdbdac4c23ad118837b496a19e7f69596dc256ed8", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044533, "uuid": "c60546b5-aa6c-4ad4-97e8-74a37396f75e", "value": "T1A205E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044533, "uuid": "bbc7c9ec-f58f-4d2f-940d-fdfce53536ec", "value": "12288:lZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:lHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770044533, "uuid": "6e3dec6c-fb58-47f7-a0d8-8992d22c52d2", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044533, "uuid": "9d5968da-930c-4f80-ac45-9723eb3180c2", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044533, "uuid": "83f37a2e-98e5-4b3f-b5d1-9c2b5e4389ed", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "b3ea0263-1a77-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1770044533, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044533, "uuid": "df0351c7-c091-4cad-86d6-c8627511601d", "comment": "Malware payload", "value": "567d3249dbe60fa9478a424a69c2c535", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044533, "uuid": "cda22a5b-dc1d-4983-8ee0-f0a733d68f48", "comment": "Malware payload", "value": "ff70c53dd6e9806c588d8f78ee35d406db0879bf5419a18a87c7982c79e3e9bb", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044533, "uuid": "89e3c375-6f56-473c-a126-c744e88d946a", "value": "T19F05E184F5E01E67E487813F9B8246720266ED5FB34AC317574876BBB4BEA34EB153", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044533, "uuid": "a7a8a294-84ef-48b5-ad2c-8b7fb27576b8", "value": "12288:BZpdDbfRWxSYOkwVcqcMFT5G1z6EtYOyDIGOnd7w4bLvVc:BHlb/KwiqcMFUzYP8GU7PvVc", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770044533, "uuid": "7d16f1c1-d7fa-4c60-8f13-0961cf773cc7", "value": 848048, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044533, "uuid": "e7518d5a-a85c-4ffa-9534-ea3b9f99b784", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044533, "uuid": "461daa19-0f48-4de0-8472-32861c96f24f", "value": "t189217143a83f9f3ad5a2d8b0dc6a0725512b5702b4f9e7109f3ca9d06c7a016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e6d0b5db-7fda-11eb-99ee-ac162dbe2a66", "comment": "Malware payload (Hajime)", "timestamp": 1770044534, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044534, "uuid": "bc4c4cdb-f1f2-4a12-b78d-ed22cfa143ea", "comment": "Malware payload (Hajime)", "value": "5377e8f2ebdb280216c37a6195da9d6c", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044534, "uuid": "a60d3dfb-8806-4870-bcb2-cd7c7ba4d718", "comment": "Malware payload (Hajime)", "value": "020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "Cobalt strike", "colour": "#7fa17f", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "generic-av-detection", "colour": "#f22557", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "honeypot", "colour": "#15a23a", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044534, "uuid": "19d13693-0a8c-4531-8f02-82d469d0f1a1", "value": "21831229135414E5D62681F1D3FD1B84AE981FA9CEE2EC147C12BC89EE333AD3CD2618", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044534, "uuid": "1676bc9c-d354-47a9-abd1-07520218f6c1", "value": "1536:yYI0ARqw1qAEW67UIWi7M8gmfmJo0WgswnD6Efyq8PxlRkp2K3/J1V+uBNu:yYI0ARqw1qAEv7UIFM8oJorFquyjkRks", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770044534, "uuid": "106cd466-ed8b-4008-b5c0-436e71626554", "value": 85232, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "9cae4e4b-16ee-11ef-b2b7-82aee05be84a", "comment": "Malware payload", "timestamp": 1770044535, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044535, "uuid": "2a22bebc-c353-4201-b90e-a0277cb3206a", "comment": "Malware payload", "value": "936b35bfee8232f437bf6b46e88401dd", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044535, "uuid": "c73d1cce-3b36-40ea-849e-c9f3cded05fe", "comment": "Malware payload", "value": "de9a5647bdf02fa2b927566c78e54d5931e25c9f07d2ab884e135766815d53cf", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshd", "colour": "#893e97", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044535, "uuid": "bd1ce7aa-001c-4203-8879-a7e4598685f4", "value": "T1B9356D56F9808EA2C5D8177BF75D835833134B78D7DEB102CD08672877AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044535, "uuid": "f3c2d3c5-3ae3-4b82-b15d-ed4476f48a06", "value": "12288:E8dASOYRNCAJump208iJftl7zmnSrlcaUxQ5TVFQGl9eLtRajZa6ZTxIVD7bLv:E8dbbsO38+TfgRinIVvv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770044535, "uuid": "f9151970-9942-44d2-9093-f80ac8071412", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044535, "uuid": "12945470-1509-47a2-bca3-ce525ba365eb", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044535, "uuid": "bf707288-da99-4d21-b9d2-f2f107a4c9b1", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "2fa7ce9e-0807-11ef-ab08-82aee05be84a", "comment": "Malware payload", "timestamp": 1770044540, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044540, "uuid": "fa94b287-acb1-4af7-ac19-615f15369b66", "comment": "Malware payload", "value": "df64a5c787f34c5b38c8103a67e3d97c", "object_relation": "md5", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044540, "uuid": "465067c7-f8ea-48a1-940d-29da88333a8e", "comment": "Malware payload", "value": "6f1bbcaa6efc41ee257919a85acc9ea5b1f82c8def103e39629e0b5161800ccc", "object_relation": "sha256", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false }, { "name": "SSHDoor", "colour": "#E78F29", "exportable": true, "hide_tag": false }, { "name": "trojan.sshdkit", "colour": "#25313a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044540, "uuid": "d0fdfeed-fada-4e6b-8772-ed2233cfcd62", "value": "T11D356D56F9808EA2C5D8177BB75DC35833234B78D7DEB102CD08672477AB95A0E3B9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044540, "uuid": "eafb96cd-0ad1-4e96-aa86-237dd40f228f", "value": "12288:sQFoCapOujNJ7h8SYIhU1wwy7zh36bV7CIBolbVtE7ZdXjboyjBNY3v9fQbLv:sQFbJi5Pa/CbmzotVqv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770044540, "uuid": "0a570759-4fe3-4e8a-bd59-b25b48460f0a", "value": 1110304, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044540, "uuid": "a1325248-d472-41e1-a6ec-99179d5a5880", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true }, { "type": "telfhash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044540, "uuid": "033a985e-567f-4486-80b0-5a06251195ba", "value": "t140317403a83f8f3ac5a298b0dc650765516b5701b4f9d7109f3ca9d06c79016702aa", "object_relation": "telfhash" } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "47a4c330-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770044586, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044586, "uuid": "18716c68-34be-41f3-ba5c-b19675223e95", "comment": "Malware payload", "value": "d58cc3b9771a6ee52bbc18d325ffb120", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044586, "uuid": "6c361552-14df-4a58-9d71-625b722934df", "comment": "Malware payload", "value": "a8dcfa563865b2894d59586b2a697832ba5820c193582f652baa286120b2a7f0", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044586, "uuid": "81b64b69-bde3-4264-be45-78a9dfd418ff", "value": "T1F354128BA5858C903493850AE7B8EB54C3EAD9BC236A95E3D6DC3071439377C3469F", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044586, "uuid": "68780cf2-72f7-4c74-bf40-ab312b2b0ddf", "value": "6144:uII7a1rhkG3c4fFN3CqSZp67gBOoomW9+Lpp9pv:MORyG3XnUmgBONmaWp9pv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770044586, "uuid": "9b0ec200-11b1-4f52-9a0b-5ac864afad7f", "value": 290701, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044586, "uuid": "e7e90e47-f3e2-4982-b076-0dad4adbb168", "value": "application/octet-stream", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6111afe9-004a-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770045488, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770045488, "uuid": "455181e3-7156-449d-981a-9ce63a04cc67", "comment": "Malware payload", "value": "1eb8107ee62b70b059cadf2e6d148b11", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770045488, "uuid": "9047d3d3-fb3e-4270-9e0f-435392d3ddad", "comment": "Malware payload", "value": "928af44e8437dd44dbb04d416c1c4edeaae9d2d56714a3dbf498e8e4ca054528", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770045488, "uuid": "003b6722-fd37-4c23-b931-9498013ae1a8", "value": "T1F0664B22FD9A45A6C6BFE23494A052517A31349583313FD32ED819BB097AFC8273F7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770045488, "uuid": "f49d5ab8-b3be-4ab2-8b5d-23fdf1b4f782", "value": "4035d2883e01d64f3e7a9dccb1d63af5", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770045488, "uuid": "da80b8a6-354b-4429-840f-89a9e3f46575", "value": "49152:gnwxDhbDfBO0j2h5C29PUy3R9Jkxpqcrqh4nBG90s167IxW3EN90jCZQfel5yF1q:RV3bj25NDf2XFU", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770045488, "uuid": "9121866b-0d19-4622-8d02-8cb43ce23be5", "value": 6859912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770045488, "uuid": "ad061708-b95f-4ff5-b448-e2f0db749969", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "686c900c-0053-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770049365, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770049365, "uuid": "4b168be5-669a-48f4-a276-ef95a47596cf", "comment": "Malware payload", "value": "9fc7542d29cda3f412b9f6ea26d7cc39", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770049365, "uuid": "237ce875-99e8-4df7-9fdc-42d572781525", "comment": "Malware payload", "value": "95d6454a96b4240f6eba499eb3eb6714807386e18d4ad8e471f0e241f541074e", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770049365, "uuid": "362145aa-0b7b-452d-9117-92323b2986a2", "value": "T110310A421A2B9320F7235571368FCC454A4D294C289FC0D7CA1FABBBEFEA4754B1A9", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770049365, "uuid": "ef732ef8-2b2a-42f6-8dc2-4854562590c5", "value": "24:99VClqImYNkd9gpKRZS1jklvNfs4Kv5QPaEZOIRt+9wuHZqKQQ+Jzh:9Cl5WOMDgkI4Y5QPaEZOIRt2w+Z7QQ+T", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770049365, "uuid": "74c29733-56dc-4115-819c-e5f7e8644a95", "value": 1589, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770049365, "uuid": "fa60e171-01d9-472f-acf9-038540d38f25", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f8afd77c-005e-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770054332, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054332, "uuid": "80c06c16-cb29-4b01-9c14-3db8cd28f5a0", "comment": "Malware payload", "value": "3e53a96e8efd6204bd7544e1aecf706f", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054332, "uuid": "483c77ed-29d9-4a0f-a10a-c2a0523acbf6", "comment": "Malware payload", "value": "8db859ba6c086e02a47900b900a38ec1ba06d3c1ee1fb521a2a089e26d9e675e", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054332, "uuid": "982926d8-00c9-4e58-8b9c-eb758d2b44c8", "value": "T1BA8308327488582A210B428FD267336C70EFDCE2D611E5B6F6F622344BA5EE136B75", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054332, "uuid": "b10c592e-adbb-44a6-8cd5-c9306a97bfa4", "value": "1536:XJyp/QdMqpYJKNoCtpxD3tx2VDXpdyr2pbnyWayVN/:XEKltp9txAX/yr2pbyWXVN/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770054332, "uuid": "cbb385e3-f76c-4c34-93b7-035ad0a4c728", "value": 85119, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054332, "uuid": "597ef98b-5532-44bb-8cda-7a1021e78480", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "011eee52-fe69-11f0-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770054486, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054486, "uuid": "29dbc6f2-3904-4912-834b-5e6888445c5b", "comment": "Malware payload", "value": "1ad0380112768af41169e027ad2c1e8f", "object_relation": "md5", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054486, "uuid": "651114f5-dc8a-4f41-9955-6ab97be3e05a", "comment": "Malware payload", "value": "b75258b905334fef87ed8c67f945dd1f73440a050f90efbc7c11fb599bb8fdbf", "object_relation": "sha256", "Tag": [ { "name": "CHE", "colour": "#73e668", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "spammed-by-tofsee", "colour": "#e441e8", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false }, { "name": "zip", "colour": "#8f1ebb", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054486, "uuid": "29d5ad40-7f86-4c22-a606-0e4484dca556", "value": "T1A7310A4206112711CC03E2B690D5C6A491E1834B9324F2A31C7EAD53EFEC1F8EA673", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054486, "uuid": "e14f6421-5733-45ae-8d80-0c05886229ee", "value": "48:9IDjOlGsR2uGlEXDlp3U/APkyXKJuj1mr:CulwH+Dl+VyXKwwr", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770054486, "uuid": "40857be0-b48a-42f4-a275-3ae5f7fafe2c", "value": 1586, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054486, "uuid": "9233f7e9-60f4-4e94-866e-fc100cd3cf90", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed04a24c-005f-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770054742, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054742, "uuid": "06e5720d-3f7f-436a-8224-7a2b4e287fba", "comment": "Malware payload", "value": "dd5582ddc1173f6bcd9b54e8ceb7615b", "object_relation": "md5", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054742, "uuid": "ae6362dc-83bb-493e-86d8-a975c93e4cc6", "comment": "Malware payload", "value": "3319e33d4c10c2171aacae5c4d3c64edc6682ebba3ffc15ac5bcecfbe2827c63", "object_relation": "sha256", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "ClickFix", "colour": "#1e5b64", "exportable": true, "hide_tag": false }, { "name": "ClickFix-cc", "colour": "#F076C8", "exportable": true, "hide_tag": false }, { "name": "html", "colour": "#0153b0", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054742, "uuid": "c604c377-ce6d-46c7-b513-1b7b03eab57e", "value": "T1A4E3F97F83F6313572038359F5A2A728966DC233EB410ED2F9B29A9C8FC15A141772", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054742, "uuid": "98378c54-1977-456a-8f51-944a1bed4476", "value": "768:YZdapEbrcWlGRNjcXscJGcz74k/tHcTwAMKhsfifRf+VIrePfHKIYW7goFSnUh+y:QapArJl4k2wghUIrU7UF4BVhYTa", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770054742, "uuid": "b3fb87e9-78f6-4c01-8e5f-b453e029a064", "value": 147272, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054742, "uuid": "fa0c73f5-6ae7-4535-a6ad-d211c9894840", "value": "text/html", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "3188cfc4-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770054857, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054857, "uuid": "510d44c8-c678-427b-9595-872c6e0a1b02", "comment": "Malware payload (Mirai)", "value": "e1007a6560e88c69d6fee8ef81753ba6", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054857, "uuid": "26f3d056-a6c3-4ec4-ace7-5125f64c81e2", "comment": "Malware payload (Mirai)", "value": "88918c3882815bca3c78161b8c9e3d9aebc86597389e1b5260ac8cd828603d0d", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054857, "uuid": "6a0a2554-173a-4432-b285-f9d80f9ae8df", "value": "T1DDB34A05E65382F4D887037ECB3757A10B38F4169176FAA1EF493352BE6128D9C853", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054857, "uuid": "5ffee9f6-5a2d-48e4-9f14-361c3485faf9", "value": "1536:lDHLAb+cvdO4Txn1Qs+v6dyLRgEtAz5Sp06OAXACqZ7i3hfvWx/wBFKilhD:lDHKFNPYLOE6z5yXfq0fu", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770054857, "uuid": "254cffc2-8abe-48f8-a229-d3b451c2055a", "value": 113992, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054857, "uuid": "e5f37fb5-4d10-47f4-b59d-038a3b864944", "value": "application/x-pie-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8652469b-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770054999, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054999, "uuid": "d0977e78-5670-4e42-95ea-83b2a42ad785", "comment": "Malware payload", "value": "157bd36c247c1fc8ab05685b5e331568", "object_relation": "md5", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054999, "uuid": "ea7a73d5-787f-48c2-ace6-9b789f770faa", "comment": "Malware payload", "value": "7aab4e6bd5c3c606fcce52d1dedf257f08bf7dbda4d66c751b6d0ee859bb9248", "object_relation": "sha256", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054999, "uuid": "b45fa980-895b-407f-aa89-7e4e06a085d9", "value": "T13B8512513ACAC43AD29E053788629B75356EBC760B30D4CB7F917D6C9D703D2A87A3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054999, "uuid": "7c0c014d-eefe-41f8-a8ff-d40a2e7c0f9f", "value": "49152:ipxxnKyitSpxpjd//lOPaQVk7sKxQ1MBQnA:ipayaSpXjdXCaQVkY4C", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770054999, "uuid": "305bc64b-547e-427a-b385-e0ee8542213f", "value": 1802240, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054999, "uuid": "058fedb4-8fbd-4c0c-ad72-18d8b581170f", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb5531f9-ff90-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "1a2a12f2-5459-45b6-96cb-850d6fa9352f", "comment": "Malware payload (Mirai)", "value": "86cc35deb758e9a6e9ab1b4e0f6cde7e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "bda31dd7-bee1-4d89-991d-b1db0939f59b", "comment": "Malware payload (Mirai)", "value": "1a7341701f36f1933884e28936124b794885638950d402081588b443528fb379", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055171, "uuid": "edf11c0c-f7e6-4a24-8428-e0dd935b887f", "value": "T1CAC3C84E6E218F7DF768833047B38B25975923D63AE1D685E2ACD5045F6038E241FF", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055171, "uuid": "f80cd015-8f4e-4003-b174-ecbd381e6f3f", "value": "1536:0v6drsuMmKuTwcxYWpBlZ/Y7gWxUhMEce1j58YQplk:0gsTowcrpxY7gW0MEoYkk", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055171, "uuid": "bb90e9b7-d990-405c-acc2-a889383631fb", "value": 118400, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055171, "uuid": "952d33d4-b40a-471f-b0de-73bb5cb0ba3d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "73a8b1af-fed3-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055171, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "53d1c1a9-9665-4c9a-b316-60e18fbd84d6", "comment": "Malware payload (Mirai)", "value": "da4b90edbea8be38133b776321967a3e", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "e13f5b6b-cbf5-4831-9251-77410bf57d73", "comment": "Malware payload (Mirai)", "value": "cf8055aade9f00af7e258271dd9e2ceae54574acb9291d6b8791f26afd387834", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055171, "uuid": "0a5eed87-105c-4aff-8cbd-890bc7918463", "value": "T16C330952B88145A9C6D047BA771E978A336363A9C2DF7353DD0C0F416ACA70F4EABD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055171, "uuid": "f307845c-7401-439c-8e99-669a6cda9ad6", "value": "768:32YY8ay9aQ8tD/TVWPysgDUjDroGhNTjdXM4v2Fr0nSz:32YY8v9qvUVXjPPhNTdRC", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055171, "uuid": "f4995b45-1ef2-4604-ac26-cea88f93fe68", "value": 53672, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055171, "uuid": "7e491cd6-6b3f-4ec1-b5d8-81b85f77fc2e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed4a74f6-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055172, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "9c223d2f-ebf5-4c8d-9e66-224dcc99bcda", "comment": "Malware payload (Mirai)", "value": "d2def3c9f91e6c71539f6eab33898743", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "2d72a0e4-9606-4fdb-bc8f-1c5d7c7e790c", "comment": "Malware payload (Mirai)", "value": "27fa6bb83382f430b82e1489191856d0bc86ef1fe6ec0b3a0da09ce50c47b458", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055172, "uuid": "9fcb624a-8143-4e7a-bdbc-f078f2f55cd9", "value": "T143935C42B70C0A43E1575DF02A3F17E1C3AA66A120E8FA89790EDF45D6B2E325547E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055172, "uuid": "9e53157f-2e97-446d-bb35-8ccf2fcb10f1", "value": "1536:BNb87cwG/MNsX4XlZymucyHUcyDHsUKbRBMXpjAawJIN+tWxsV74yvsruAuYXPXL:v7/JAj9w2FsVNsrdMi", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055172, "uuid": "689fa0ba-fab0-4466-a8a8-9eab9769a1d1", "value": 89736, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055172, "uuid": "0b6f3d96-64db-4070-97d5-4797f31197cc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ed43baa5-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055189, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055189, "uuid": "4c637f96-36da-4e3c-98d9-ca680be48167", "comment": "Malware payload (Mirai)", "value": "7b9a9e032bcf307509ace486827e05d4", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055189, "uuid": "f8dbae51-caa4-444e-b1ad-fa1db36e4e6a", "comment": "Malware payload (Mirai)", "value": "00be5694f5b2f61b9c445b5784d9104231080b6661bea43c6d152f78b9eb5e6a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055189, "uuid": "4903178c-448e-4237-a39a-24123a59a7c7", "value": "T1FD83495374C090FCC989C07487AFA53AC863B07D1235B25B27D4EF227E89E512F6DA", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055189, "uuid": "c3c91ee4-9d3d-42f2-aa54-51bfd0fa83cb", "value": "1536:2y6LWKjjaY6yT8RoUWDXLUED/141+8KDe/qzIWsnztx/l:xjKjjakT8WhXLUA141+8KVzIWsnzfN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055189, "uuid": "e36e6778-7579-4dda-a387-91db3a8b4b11", "value": 86912, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055189, "uuid": "41361290-c599-4ec3-9a64-1b2250017934", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bb3ff8eb-ff90-11f0-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055190, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055190, "uuid": "b2755c44-3bbd-4bb3-ae36-0ff25f269c4d", "comment": "Malware payload (Mirai)", "value": "8471be37a0fb2a911523aaf4ce5f956d", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055190, "uuid": "3ab53d0c-b03b-4eda-b95d-feeb33be61d8", "comment": "Malware payload (Mirai)", "value": "1e71237ce2b6ce500ba015144dae5c1ea8e913eb5c3e56111394d07a9e326ea1", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055190, "uuid": "c967728d-4f07-4fe6-96f4-51cd46bdf2cb", "value": "T11D934B02B70C0E87D1675DF02A3F27D1C3EEA6E021F4FA89791E9A45D1B6D321586E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055190, "uuid": "284f1749-beac-4733-b60d-167df03f3487", "value": "1536:Xr+M77pzVipmWETPfr0iS9SqcasE1gHU3cH31hJee8Jy0FOcwgEVxo8lw7hWDnVs:XL7fTZJlebJynHV/lw6NY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055190, "uuid": "7b116414-1178-406b-970a-07106741362a", "value": 89648, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055190, "uuid": "28abd873-d72c-4ea9-ba1b-2d772b086034", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bddc572a-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055522, "uuid": "f04bc8f6-ee80-4214-bc80-7ab625da8324", "comment": "Malware payload (Mirai)", "value": "16bfdd2ab6ea6dab116884b6bd731fdf", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055522, "uuid": "c0d32096-d853-42c9-b0a0-0961112ec32a", "comment": "Malware payload (Mirai)", "value": "76e6dca295a765bc30f0c4717896ae04b4822a30073d7ad4f18b85e7e9834d49", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055522, "uuid": "53b2b1a9-c0ba-4355-92fe-b74ad675d1d2", "value": "T12191C1E56478677A2DA0ED7372D6C682F18036AAE1C90C0AE3D2F0E4454CF65FC84A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055522, "uuid": "19f3bcc5-08b9-4b2a-8fec-734ce3458604", "value": "48:vnuMV4klnt1V4RnrsrWV4cnCoV4anEWEEV4Een2kV4+nt1V4RnpZV49nASV4snQl:vr7nW1P/DENEpeNNrajEBfTlr07A3q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055522, "uuid": "cc8b762e-e145-4570-ab62-65a5bc6bcccc", "value": 4518, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055522, "uuid": "6912df7a-7761-4e87-bc5f-52b8503eb60a", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bdeeeab9-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055522, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055522, "uuid": "02d0042f-4fcb-4b34-9d3d-56985db724b4", "comment": "Malware payload (Mirai)", "value": "c32d77e7bb9f1c2b3a3a55818017579c", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055522, "uuid": "2c152a9e-7382-4489-a9d2-1e82bc660b44", "comment": "Malware payload (Mirai)", "value": "04e03ed6535dac4576b03ce61ec43cd3f4da02806b0700cc9f81d62f568b34e6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055522, "uuid": "74746466-6e69-4d55-8541-7ee606245c41", "value": "T19391C1E57478577A2DA1ED73B2D6C682F18032EAE1C90C0AE2D2F0E5455CF65FC84A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055522, "uuid": "8da4a87e-716e-4b24-a9c7-2fafe4894ad5", "value": "96:vrm4nv4164/+4ENEpn4Nw4rz4jV4Bq4T44rl47h43gb:CI/DtN4nRAE7hGApb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055522, "uuid": "1adbdb81-b689-491a-8455-c7540179cd43", "value": 4557, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055522, "uuid": "364e7397-6bfd-453a-ab89-91bfac43b092", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf5b88b8-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055524, "uuid": "c85596fc-a50c-4bca-9395-d281c47df537", "comment": "Malware payload (Mirai)", "value": "544fbefe7e2e7d80aeb0264460c70926", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055524, "uuid": "4f251e0f-bf22-437c-b4d6-9da96b164b6b", "comment": "Malware payload (Mirai)", "value": "9b1c502ab28b5eaa6115f1eeba8bf574c6148324b86e0f9c8bf3c81e232e724b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055524, "uuid": "0b498d81-64f6-41f8-a1db-f42c68153633", "value": "T1C29183E57474677A2DB0ED7376D6C682F18032AAD1C94C0AE2D5F0E4484CF61FC94A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055524, "uuid": "85ca3e1c-fe73-4eb7-b782-2bbff9cbf2b7", "value": "48:vnuMV4kPnt1V4jnrsrWV4KnCoV4YnEWEEV4EEn2kV4knt1V4jnpZV43nASV46nQ1:vrFns1x/dENEpENnrYjCBhTPrS7G3M", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055524, "uuid": "eff18455-7e14-418c-8b6b-9ca95f111955", "value": 4570, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055524, "uuid": "f217067a-3b6a-4ea4-9815-8b9ab967bdb2", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf761c2f-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055524, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055524, "uuid": "e95b67d5-b90c-481b-900a-96bd2c309509", "comment": "Malware payload (Mirai)", "value": "2887e7b9df3cdde792726246896f6404", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055524, "uuid": "45ec53aa-e915-4f0c-8706-08f4aec3fba8", "comment": "Malware payload (Mirai)", "value": "d30a0a554dbcc94042ca4217f978ab95652b0a7334f4797644ea813172ed2227", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055524, "uuid": "90148791-12ed-4a87-8aa6-a6b2d7f21a70", "value": "T16991A3E56474977A2DA0ED7376D6C682F1C072AAD1C90D0AE2D5F0E4484CFA1FC94A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055524, "uuid": "11ec7f88-78c1-4aba-9b8f-973915e7bc6c", "value": "48:vnuMV4kInt1V4cnrsrWV4TnCoV45nEWEEV4Eln2kV4Fnt1V4cnpZV4AnASV4jnQ5:vrmn91i/uENEplNQr5j7ByTIrr7v3z", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055524, "uuid": "bef74318-5f68-4270-9050-459327a9d5de", "value": 4531, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055524, "uuid": "6316c267-34ad-4b00-b198-b4f395fa023c", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf84539a-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055525, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055525, "uuid": "a4d7099f-de09-4554-98d1-08ec373b50ec", "comment": "Malware payload (Mirai)", "value": "5e3d8b0bbe5891000a4b265e7247eb78", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055525, "uuid": "be16bc96-7a3b-45ca-9cc6-ee06e10c8bed", "comment": "Malware payload (Mirai)", "value": "d8f2e74c776d3241127e77041f3a0d042fd1e6d65b1cf2c92bc30c6a4a1deae6", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055525, "uuid": "f35d6241-3719-4ddc-b61c-841be54e1316", "value": "T1059181E56478577A2DA0ED7377D6C682F18072AAE1C94C0AE2D6F0E4484CF61FC94A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055525, "uuid": "13e94d9a-1240-4cb2-a10e-72565b674efe", "value": "48:vnuMV4k2nt1V46nrsrWV4vnCoV4BnEWEEV4Etn2kV4Nnt1V46npZV4+nASV4/nQL:vrgn11s/4ENEptNOrBjnB8T2rX773x", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055525, "uuid": "c58c719d-3381-4ef0-85a7-ca70ccd2ec65", "value": 4492, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055525, "uuid": "4740c43a-4a8a-4da3-b380-200fb2b825e4", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c8063685-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055539, "uuid": "1091e622-55a7-497e-ad87-852e1901e4ce", "comment": "Malware payload (Mirai)", "value": "704088a7057ec1fd20f5d5e909873ea3", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055539, "uuid": "c1905181-6928-4ab2-a6f0-bee3f615ca56", "comment": "Malware payload (Mirai)", "value": "7a19ffece4bf3e33715ef3deaf085f0bfe63e11cb833fafdc340752d53b81bb7", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055539, "uuid": "55985647-6eb1-4248-8494-f8f3e234276f", "value": "T1F1F31956FD819B11C5C166BAFE0E528E33131B78E2EE32129D246F34778A97F0E3A4", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055539, "uuid": "62e78936-b64c-4462-bf62-25c775be5b4b", "value": "3072:i+gZYIC4UcR1/pMaFRIQajlaXSXvyawYchlpZTv17jA0dzDXN1g:rgZYICsR1/pMB9YXSX6aXcPrz17jAKD8", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055539, "uuid": "00a4361c-287e-488a-a35f-3cf6a58258c5", "value": 166548, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055539, "uuid": "18b5cc9d-bc56-418c-8b8b-60a9d493616d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "e375cd20-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055689, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055689, "uuid": "e39bfe85-6a95-4fd7-a0af-5b6062325c25", "comment": "Malware payload (Mirai)", "value": "f16aede7e08cf8e6fe0075028310812e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055689, "uuid": "35b8bc0d-0ae7-4939-94f6-bc86ddc63eab", "comment": "Malware payload (Mirai)", "value": "c8a0e13c7375634fb421cc90ad6ae111e9f2749dcc562ec744f89dce41947b9c", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055689, "uuid": "3027e1f9-6afd-4047-9ca2-a6b8181c0e4a", "value": "T19A91C1E56479577A2EA0ED7372D6C692F18032AAE1C94D0AE3D2F0E4444DF61FC84A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055689, "uuid": "509eef19-531a-4207-a7b6-872c12b170d4", "value": "96:vrLAnSA1XA/TAENEp6ANZAruAjUABnATRArEA74A3pT:vJqmFN46gBNeQzRoT", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055689, "uuid": "4ba24d36-5d01-42ac-8733-340071b02112", "value": 4544, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055689, "uuid": "f45dd057-61c5-4c0e-a265-0a1011b39ad1", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf781132-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "2a79f6f9-567d-4db3-a04d-114a46bba4df", "comment": "Malware payload (Mirai)", "value": "c76e164d8ca70e87a7758cd5c3eb5c83", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "ce27a23a-2e9a-477e-8973-f971aa263722", "comment": "Malware payload (Mirai)", "value": "f0eb6dc531f1d13ce1fb43d56470094d4e82909e0623f45da444d99f3a7e4dcd", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055690, "uuid": "b7ccf34f-e5b7-4006-b2cf-2bca927ecc66", "value": "T19291C2E57478577A2DA0ED7372D6C682F18032AAE5C94C0AE3D2F0E4485CF61FC84A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055690, "uuid": "29db441e-7f36-48f0-a6bb-2e0fa689289b", "value": "48:vnuMV4kUnnt1V4gnnrsrWV41nnCoV43nnEWEEV4Ebnn2kV47nnt1V4gnnpZV4sn5:vr0nT1Y/MENEprNqr3j1BITyrF7x3d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055690, "uuid": "ee38de17-a9c6-4a4b-b2e2-b538dbe6afd7", "value": 4557, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055690, "uuid": "7addb077-c85c-40f0-9342-c13098e3e03b", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf89f0b6-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055690, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "d3296d93-0efe-4b79-ad82-f39b166c5cf6", "comment": "Malware payload (Mirai)", "value": "ea26df1b7fe900235088607bf3de584e", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "776fa13b-91dc-47ad-9849-4aded4edbff7", "comment": "Malware payload (Mirai)", "value": "efab1514a013c07eee6004856714832e84e9d4be05586dd9146238573d5e148f", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055690, "uuid": "75189ed3-4898-4aad-92b1-220ae0b91515", "value": "T1DE91A2E57478577A2DA0ED7376D6C682F18072AAE1C90C0AE3D6F0E4484CF65FC94A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055690, "uuid": "208e9544-9090-4173-b3ab-14ebf940f855", "value": "48:vnuMV4kEnt1V4onrsrWV4bnCoV4tnEWEEV4Epn2kV4Jnt1V4onpZV4MnASV4LnQl:vrOnR1K/mENEppN8rtjTB6TErj7n3v", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055690, "uuid": "6aad3cb1-8649-4748-bfa1-4b76528f19e5", "value": 4505, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055690, "uuid": "c677ab9d-b864-4bb9-9e0d-21b4531a445f", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "bf75ed5e-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770055691, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055691, "uuid": "10c101e1-9c9c-435f-9df1-78bd4787da76", "comment": "Malware payload (Mirai)", "value": "7273be29fc912a3f97050e8410a5cfad", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055691, "uuid": "ddb77ea5-528e-4a16-9923-63dc1e6b166e", "comment": "Malware payload (Mirai)", "value": "fd8a914781163e42e08d826a70a695d748f429c857c4f50eeb799fc22dfbdbc3", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055691, "uuid": "cbc712d4-22b0-46b9-84df-f8d6899641d7", "value": "T19A91C4E57478A77A2DA0ED7372D6C682F28072AAD1C90D0AE3D1F0E5454CF61FC84A", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055691, "uuid": "944e028e-a67d-44c2-9165-203e644f494c", "value": "48:vnuMV4kuont1V4KonrsrWV4jonCoV49onEWEEV4Ehon2kV4Bont1V4KonpZV4Gos:vrpnW19/BENEpONLrKjsBNTTrc7Y3Q", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770055691, "uuid": "ce0b5f0b-ee04-42b8-9305-c7640a586be7", "value": 4531, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055691, "uuid": "1e4f64c0-8e49-43ef-9373-0118f3308a24", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "ad007868-004c-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770056184, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056184, "uuid": "d92bad96-5b77-4ab9-ad5e-7fef795e2564", "comment": "Malware payload", "value": "116c8976043dbc3bec94eb2725c8215b", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056184, "uuid": "30606697-fccc-4d13-9de9-a670a7368c85", "comment": "Malware payload", "value": "dfb2efd53794478f7aaeaea3b23bd0667e10629727388828b6791284690c14cd", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056184, "uuid": "11dc6a7e-8451-4ffb-8424-36c0c68d2f4d", "value": "T1BF310A69F3AB08E9EE565C337C8072108911ABF50295A783AB508D1837C77509A4DC", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056184, "uuid": "03d5053e-7ef1-48b3-9b9d-2fb88e98f373", "value": "24:9ENemgDaFzPHuoQu75vlwZEhSHKEgMADJK35ba0VZ60fMyW9zz/fe5zGXHmHV:9EPgq2oQQL0EhSXgMAlK3taJOY1L3m1", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056184, "uuid": "8086ff38-9bea-40aa-95ef-28fac3d444e7", "value": 1595, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056184, "uuid": "3cf08adc-8a9f-4137-a38c-ba692fddfa87", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2e7e688-0063-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770056416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "08baa537-f685-4a80-9a9f-82e3b159daa1", "comment": "Malware payload (Mirai)", "value": "61256770b2097eb1f5f839f9d0ddda91", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "b3fe154f-a86f-40be-93ee-79fab5344ed5", "comment": "Malware payload (Mirai)", "value": "937e5abdcefbf1dd01de0d158ea27d0fee085dd2d646c34e0c1495967f18ca82", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "90a5f176-5176-4456-938c-8cc462f14173", "value": "T139D2E12C62D7D2F28B15DE329DB295C22B530FFCC0AE7272075EC9E4A9554422E384", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "c3f6d0e1-09d7-4145-b7f7-8688a1ddf143", "value": "768:FqTVrikaV9Nj3QNwvB3Ay+GDriY7khCQ+SEEjMK8Yen9q3UELCG:ITFZaV993QuBwVi5SEEj42Ld", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056416, "uuid": "ddefc0e2-2163-4f55-8583-a8f4d0603be6", "value": 28356, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "348d21b1-ceb6-4e8a-becf-d34ecdb1521d", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2eb70a4-0063-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770056416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "7240bb75-9b11-4c0e-9a8a-f88574c58c5c", "comment": "Malware payload (Mirai)", "value": "a417dd9ea4b0d906b61c31ee9819a1f0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "bd657222-e887-4dc1-bf24-9ff5000321b3", "comment": "Malware payload (Mirai)", "value": "9a88131eb26a15f53361151c79d37c6c783dcc76420f9518d74869f574f647de", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "add7873a-91d6-4010-aa7a-3c81a4dc3c4f", "value": "T16323F155FC3D6C62D8110E3FE8D69507EF4F23BC40D76437352856A2EA87A8A6A252", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "331827c7-db80-4df7-a365-75cc52c45aee", "value": "768:Z6B0V1Q+7O56RgDgfUuR8NAiggPUQLoK9q3UELw7XdVdE/yzlt:ZHpOYeY6+rQk/LAbdE/yb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056416, "uuid": "80e5c1b8-47fc-4b46-b339-22915ee2cbf9", "value": 47876, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "d12cfd8d-cfbb-4358-9c9c-ca279a7eb132", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2ebf3bc-0063-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770056416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "46cb1efa-4459-4154-99e3-dc454a0a7275", "comment": "Malware payload (Mirai)", "value": "8b7a6548e02e347108f89e8268f67d00", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "f9f6d3dc-fbf0-432b-bc07-2e7281a581fe", "comment": "Malware payload (Mirai)", "value": "9d914956d68c4b9d919bd77bc9cbe8a34779c2597bb794b918aa9badac73fa0e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "cb25e531-d20d-43e2-8c2d-3b73351263b9", "value": "T114433A21BDF62E17C0D474BA11F38725B2E6529F25B8C62E7C720E49FF24A8462532", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "eed0443e-fa3c-4644-b230-6c07f833849b", "value": "768:DiUfauMzFUAIUwwuc2JB5EUxCUO+0EmuSDrxweCwSGh:DiUfozftk7OUnTmupeCM", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056416, "uuid": "9a2ed53e-33a5-4158-9e3c-6377161fa89c", "value": 56776, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "3a96fc7f-66e9-46f3-8909-5ee564db10a4", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2effd3b-0063-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770056416, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "032b5a26-45a9-4d0f-9a42-052a59bed483", "comment": "Malware payload (Mirai)", "value": "21c7c1dd8977f4bebcace647cbc8ccf0", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "7f55c8a4-057b-4374-a6a7-b89decffa659", "comment": "Malware payload (Mirai)", "value": "fe570cb845dfd7e6080ddb813fe9a441e5907c6e3c5d1f6a076c7bc79bb5af9b", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "385893c2-366a-4039-bdec-9bcfb26e9826", "value": "T16B331AD7B802AE7DFD4EE7BA84430A0DBA21772151930B37627BFC976C321585916E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "75504c69-22fb-4d1d-a3bf-4de5b0a9721c", "value": "768:N0epJqoOJ4V2woLGVS8aVZZVe4myXh1Q8/kpyXkHFhj3vJMtqleRFGblb:NGwoLy9cM4DxW8/kpxPvmtYJhb", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056416, "uuid": "1b77445e-3484-4e19-a1bc-d36399d8b198", "value": 54456, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056416, "uuid": "2596f330-aa47-4de2-9fa4-ac3484f691f7", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1c5ecb58-0064-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770056539, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056539, "uuid": "33d0f5ab-6530-42bb-9461-846c1fb11621", "comment": "Malware payload", "value": "70f7b54489d4d506c9b76b1d875632ab", "object_relation": "md5", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056539, "uuid": "4b4b35e3-e7b2-4fe4-9a69-6b20809e1f23", "comment": "Malware payload", "value": "e1534198931c985e6ef3c0ff8baf5981b78a18e67668226469fd0e6ed291d971", "object_relation": "sha256", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056539, "uuid": "feb0c33b-b7ed-419c-84b2-53278b2a31bf", "value": "T19DE02B88B8824CBEF47C48A8FA9B2847D55FD75A0D4611CD5681011FF4E4DA0A122B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056539, "uuid": "452f9754-e30a-4052-aaa8-fffde48927e9", "value": "6:/VJ+pUKUFAmVYsZJLUPYjFzxEIekQF+3FYKo1KXGVKGuWOXqIN3Ikr1IEx1IQ:/VJ+3mboYjFzoKo1fgzWs3rN", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056539, "uuid": "a5101c6b-9a07-4a0a-82ce-6647d59becd2", "value": 292, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056539, "uuid": "ee9a0a31-ada6-45a8-a3b3-3498d1f38da4", "value": "text/plain", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "f53d938a-0063-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770056659, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056659, "uuid": "f501daba-a471-4506-a167-334a60872ed7", "comment": "Malware payload (Mirai)", "value": "8ee15611537151c449ab8ffb0cedd0da", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056659, "uuid": "a6896e7e-72c5-498c-abbc-6371076350de", "comment": "Malware payload (Mirai)", "value": "0a32faccc516d4ac73178065e47d1549f2e7badb939c28aacf9c97eef22b15c6", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056659, "uuid": "8a9d2a0b-8415-4d29-9c7c-433a892b54a5", "value": "T188B2D0A1D99C99DEEE9F9C71763DF6D02FA80FA23213DE84A14EDA0504178277104E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056659, "uuid": "56ffcba9-a570-4c38-bd14-c28978a7f390", "value": "384:HCQKyGSd7uibUAkVdWxwh174MRfSRhHqtPZefAm7BAayjshGjJwtSM4uVcqgw05n:HjL7uk99y174MkRhHqtP0oQByji6JwJg", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056659, "uuid": "eebdc35c-2ec1-4c23-9c65-26674fd0434c", "value": 23704, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056659, "uuid": "e240de79-7f4a-4e04-b716-96c60943e1c9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2e353e6-0063-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770056660, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056660, "uuid": "bc979d01-cb94-41ed-9193-a9670f730cc4", "comment": "Malware payload (Mirai)", "value": "d80644020d8c64b858011a941fc323cb", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056660, "uuid": "423b68ee-d528-48d8-9bab-d297ce92182a", "comment": "Malware payload (Mirai)", "value": "96bd543036863b69b255ce815a08f453082cdb524baa960d78e7f75bf648995a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056660, "uuid": "7111845b-0442-4c90-978c-9e8e0ea68247", "value": "T15CA2C030A29E4C33DE306A379BF8C15761526279D2FD353A65A2893DB98214A78783", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056660, "uuid": "86e9df3b-84df-4b6c-b57f-16925323c041", "value": "384:O24ur4o6lG+8dC2isL5WT0pwEnEA0wgmn4s3x9Yl78buiFhymdGUop5hh:O21KlYdzQTlEOXc4sTYOa4s3Uozv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056660, "uuid": "3c1f29ea-710f-491e-8b74-f86e63388996", "value": 23256, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056660, "uuid": "fbbc515e-8c78-4713-8ad0-f820ef57af4e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "d2f36a0b-0063-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770056778, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056778, "uuid": "09126c5f-1f2c-4aca-8f18-500bf5d07fa0", "comment": "Malware payload (Mirai)", "value": "61b261e96b47d6e3bc6d5200ff411413", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056778, "uuid": "5b010b1b-a37f-4390-895b-15889cb5a486", "comment": "Malware payload (Mirai)", "value": "ee1a833600f81df10fdcae6761570fc519166eec2670df58f60fb9a8c4401a8f", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056778, "uuid": "8fd6db90-bc69-4039-8775-fdfae13bcd0a", "value": "T1EB92D0701256D9ECD6A0943BDDFDC388747707BCD2F7616A10885AE4AACC051357E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056778, "uuid": "9a955981-f5a7-4ddd-a2bb-0d93593fe133", "value": "384:JLMglAGFaTxBfr3loQ0xh/G3VAA/cpsp2fduDUm0VP/hymdGUop5hK7:Jw4AMqDV90xF1I2fdr9P/s3UozY7", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056778, "uuid": "cd446414-a28b-4f43-af98-3499dc07c98d", "value": 19468, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056778, "uuid": "aa21fab0-460b-4254-b113-dba8e258fedc", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0c18db61-f4a2-11f0-9446-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770056841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056841, "uuid": "61b3d379-3a36-4e8d-8598-6d615f8f2d25", "comment": "Malware payload (Gafgyt)", "value": "e73c21adea9f04865519d04ccaef6a79", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056841, "uuid": "4aa76066-c5a1-4977-a3be-58ce71c98d60", "comment": "Malware payload (Gafgyt)", "value": "490735ee8f6e61fab8c608d35b9c434c8f4f7060552769584ff6ca519cbafe89", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056841, "uuid": "5c6906a0-ce30-41e3-9878-01e97192b77c", "value": "T107B30805F9404B23C6D26BBBF79B43CD77366658ABD7330196297EB02BC17982E3A1", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056841, "uuid": "201ebbff-10e5-42a6-afbc-dc848b0acd37", "value": "3072:lqDUOulvQ+nozmrCppEDtkLWN5h8MbKZlrDoeZNV7YHQQ/hVOmAD3m:0pEcWN5h8MbK97YHQQ/hVOmAD3m", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056841, "uuid": "638ee8f0-93b2-4dd2-a0be-b722669b3684", "value": 116040, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056841, "uuid": "efba583d-13e4-4eec-90e3-17ca74d533d9", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "271a0eee-f4a2-11f0-9446-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770056841, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056841, "uuid": "34fe0877-dcb0-4411-a113-6bf93bcf6df6", "comment": "Malware payload (Gafgyt)", "value": "f1c9d33518f7709cf488931bd5e9d5d0", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056841, "uuid": "cd8914f2-41ae-4afa-a286-5cc005555960", "comment": "Malware payload (Gafgyt)", "value": "2202c7e3b4f89af0f31f2d2c453e200ec320490d7327ce10a877ac6731b0ccff", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056841, "uuid": "7a6506fe-59ac-464f-b25f-8c51e9bc2a10", "value": "T17CD3C7176B508EB3D81FDD3706DA460220CDE55A16E87B6BB6B4C91CE78B84F09E3D", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056841, "uuid": "946d5a1c-469d-46d7-ac2a-cdacc9999be6", "value": "1536:8g4reT9HLsNp17Osky8ZWqIX0Fbsbmo8iuHat5hWt57gUUxOCfF3xuhmqY1fqjBX:8mLkkVICJOt5hW3mfF3xemqY1fuBmvm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056841, "uuid": "650d3321-d1eb-4a1b-a35d-5a741a971d90", "value": 137917, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056841, "uuid": "b7c2fa88-4872-4d82-ab45-c6f760994d9a", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "0eabf24d-f4a2-11f0-9446-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770056842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056842, "uuid": "6396349a-2711-45d2-b729-09c4318fedf9", "comment": "Malware payload (Gafgyt)", "value": "3f04c23c87496a45b5d6f50666a5bb94", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056842, "uuid": "0338c739-da91-4982-88cb-5d6742fa35c0", "comment": "Malware payload (Gafgyt)", "value": "5f5421cb72d0c879831ad58b1f073817c976cc8c68c9bba0a95f98065e379d7b", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056842, "uuid": "20f0ff87-550a-45e4-b5a1-627d6f24f51b", "value": "T194A36C1B6251C5FAC08756F62BDFA6615823F83A0B33710673D9BCA83F218C95E6E7", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056842, "uuid": "c7f948c5-68ca-4c36-8d59-0a99e227faba", "value": "3072:Pd2nDFe2oeLOOtJYyhAD3rZSrlphai6OpTmHyVQX5A+u+cm:aqyhQ6phai6ORmHyVQX5A+u+cm", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056842, "uuid": "eba80774-fbb0-405f-ae34-f4cdec404aaf", "value": 102934, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056842, "uuid": "0f2393fa-fce4-4eab-90c1-125a64c54fa5", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "04d08113-f4a2-11f0-9446-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770056842, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056842, "uuid": "12f1cf60-14e7-4f91-90ef-50509eceb372", "comment": "Malware payload (Gafgyt)", "value": "97257d1085f77d39166f840938d314d8", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056842, "uuid": "869a7238-b552-42be-ad57-1b284fa2cd29", "comment": "Malware payload (Gafgyt)", "value": "77e2ed4ee4e8b7c84175b494c0ee4def2cddbd395408ef3f87d58863c8a79e00", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "DEU", "colour": "#3ff13b", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056842, "uuid": "ba24ff3b-409b-4074-a9e8-16136895d1d0", "value": "T175834B829641DAB3D19306F512AB8B150232FE3F5E1BDEA2F31C3CF48B129847265B", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056842, "uuid": "7c4f7837-9b24-4357-a48e-df2d5666cd6f", "value": "1536:m4rEUHe3QUzEPuTs5loupkqBYlww9k4cgtAPH15hCZsG7she0QzUzJYQ2Wk:3rTLUwmYwup0wak4rc5hCV7Ue0QzUFYV", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056842, "uuid": "cdb5a4e4-71da-4d99-93e0-83a7b36f3c46", "value": 87892, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056842, "uuid": "e0b031a5-53c5-4ad2-9c22-232110fb9d05", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "091f2b2e-f4a2-11f0-9446-82aee05be84a", "comment": "Malware payload (Gafgyt)", "timestamp": 1770056896, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056896, "uuid": "8cf0e9b4-9f94-4b56-8a16-1f2633867bc0", "comment": "Malware payload (Gafgyt)", "value": "6972d3d62253c486b78ab5a4ba17584b", "object_relation": "md5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056896, "uuid": "b8d87d50-4c95-480c-a7fe-9932700a1f3f", "comment": "Malware payload (Gafgyt)", "value": "f3cde3780136aa469649c5028c4eb3262738579140d03448c618c7ca50cfd7db", "object_relation": "sha256", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056896, "uuid": "671a311e-5cf4-4aa5-8e11-37da3816c8b1", "value": "T1B83145EBE4614DBD3F54A91732E5461434E098A658FEDF37ACEC34E5019CE8CA4C26", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056896, "uuid": "f9917246-b264-4659-8d25-a2732507a3af", "value": "48:vSQL+xarHKhdJGI3OA5I3rsysRswssrI32d:vSu+xarHKhrGGOA5Gr1ofBrI32d", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770056896, "uuid": "6a7859db-8da8-4ea5-97eb-f6366f319442", "value": 1816, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056896, "uuid": "0e347a89-ff19-4239-a1f0-2ab3085c4bab", "value": "text/x-shellscript", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c7a47c19-0065-11f1-8b2a-82aee05be84a", "comment": "Malware payload (ConnectWise)", "timestamp": 1770057256, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057256, "uuid": "b9032e1e-3c11-4e8e-bcb5-e9839234eaa9", "comment": "Malware payload (ConnectWise)", "value": "d475efc98198d9512e7b8d595cc21bc1", "object_relation": "md5", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057256, "uuid": "70c76b9d-dbe1-4d41-82d4-52fa3894b7e8", "comment": "Malware payload (ConnectWise)", "value": "2c49a0069f0c861a29b268d23844d318c285e5526a3eeaebd39b760aad05b62a", "object_relation": "sha256", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057256, "uuid": "4914bbf0-4b35-4448-8094-b93db6f16329", "value": "T12ED622136BF89E67E0B1DB74FF365464A7277E055922B1EE1214790E2F70A8089A33", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057256, "uuid": "a2a63baa-3550-4ac0-97ac-98a941bdcc08", "value": "196608:gHxcp9ym3nltDUJV+Hxcp9ym3EHxcp9ym3zHxcp9ym32Hxcp9ym3KHxcp9ym39Hn:OGplpNGpiGpdGpEGpYGpvGp0", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770057256, "uuid": "d6c4db48-c4f9-45cf-af34-0ed1536c0d6b", "value": 13545472, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057256, "uuid": "76f88ca1-0540-4dbe-9c96-04c4827c6153", "value": "application/x-msi", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "190df409-0067-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770057822, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057822, "uuid": "673f1e3d-ee72-499e-97bd-5d84af27ba07", "comment": "Malware payload (Mirai)", "value": "4b535bde8ecf10c9632d0cc175291ef7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057822, "uuid": "2dc4f810-0e04-444a-9a52-e2aa709a296d", "comment": "Malware payload (Mirai)", "value": "cdeca3af43aae62adc57e70847fffbe70a593d81e20fa379798d802470b4f48e", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057822, "uuid": "c959eb2c-8cbe-4839-8e0f-82e2388a5c3f", "value": "T147D36B77CC256F58C965E5B1F0318F796B63A954818B2FBA14ABC6788043D8CF6063", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057822, "uuid": "02a35f43-2164-4fc6-b580-0bd4091da310", "value": "3072:amrUZgz07JcawFUu137pvcTW5yILed/b:trUZg2WawFhJcC5yn/b", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770057822, "uuid": "c03ce491-7ae4-41d3-9842-d90b669a9bdb", "value": 138076, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057822, "uuid": "8e7cd593-e35a-4ace-b9a5-0b1de59c137e", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "15d0ea92-0068-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770058246, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770058246, "uuid": "ff767892-540b-48ee-ad30-f6641fa460a6", "comment": "Malware payload (Mirai)", "value": "747d9ac68b75187fb4b657f8b019d2d7", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770058246, "uuid": "b7162476-0308-4354-8e79-b2bf481a8568", "comment": "Malware payload (Mirai)", "value": "773feea3d07ca287d991dd98c2824ed4626bb59a0114fcbfde13b52c9a78865a", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770058246, "uuid": "de0542ad-79bf-498b-b91d-b2269230416a", "value": "T1C9E3BF97B7475050C8E10BF84BCB5BAC293B21119E6B88F76D2E363A19775CB580B3", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770058246, "uuid": "4a167abf-d71b-4605-ab01-9ab5a708586a", "value": "3072:/XIWWAYIgH7jOsZW0VuqqvnYXge7p6gXCZvCA+lq:/YWWAL0OR0vNn7VCZvCJq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770058246, "uuid": "c1fac410-626c-4dc2-b931-e1edd8f701c5", "value": 157140, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770058246, "uuid": "e88d272b-b6ea-4cb3-8264-bb0bb7efea49", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "6e98dfca-0068-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770058395, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770058395, "uuid": "4ea060c9-595f-4e34-862c-5c35dd311598", "comment": "Malware payload (Mirai)", "value": "ff10e91a5f04f500c5996ab713a6ca18", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770058395, "uuid": "72ddfaa3-2d2d-47a6-8839-98104de442ce", "comment": "Malware payload (Mirai)", "value": "27fa2618c2db720ea67a5a467fe649f977ef0978ec3928c724ffc49aac452d63", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770058395, "uuid": "6108da32-5994-4cbd-9b1e-e3c07240718c", "value": "T1F8E33A06B30D0947E2632EF43B3B27D193EFDA8125E4E644355FAE4A91B2D32158AD", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770058395, "uuid": "6d8ff1f0-a582-486e-a87d-c98b712bafa1", "value": "1536:i3bLCO4B+fu4UkcqffLxuNnMrZ9uxXK7VhPeE/iGfqDC7cuN+LTDRUz+8aCWdWB7:irLCO724VxNjhJRP/BsUz+qWEFpena/", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770058395, "uuid": "4e389d75-95a1-4f7d-9b7f-6dfe581b5bfa", "value": 154348, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770058395, "uuid": "0ba0ab8a-954c-42d3-b931-87f46a033276", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "c3e382aa-0069-11f1-8b2a-82aee05be84a", "comment": "Malware payload (Mirai)", "timestamp": 1770058968, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770058968, "uuid": "53aa049e-ce0b-4fa1-ae20-e8b96cdfe4ba", "comment": "Malware payload (Mirai)", "value": "927ba05803fc34c1e61852ce497e0120", "object_relation": "md5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770058968, "uuid": "d97aa9d4-56a0-4549-b45a-b780dfff30b2", "comment": "Malware payload (Mirai)", "value": "b2e1713d8dcd91d42a1b1ab03a74031d7f8c0fdc83a12a29308e3882c8cd1d92", "object_relation": "sha256", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770058968, "uuid": "4c773c55-d131-4e79-8143-87ff3b30c07f", "value": "T19E146BA9BA0F6C41F2C2D3F9DE4C87E13E1B35E3C7368971791212EDCAA39D959905", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770058968, "uuid": "73cefad5-5d53-45b7-a31a-710a38147536", "value": "3072:DcTGAI+DejTbp1l0P76WjleC08wO9s7krJmioRslMdOl7oq:/AI+DoTbp1lg7rj4C057klQslf7oq", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770058968, "uuid": "c2d4aa1c-68b2-40a1-8f35-9abe03ac3226", "value": 206832, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770058968, "uuid": "1cb83f57-0d3e-4249-85e8-3036154c31c3", "value": "application/x-executable", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "8ee720f6-7fdd-11eb-99ee-ac162dbe2a66", "comment": "Malware payload", "timestamp": 1770060499, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770060499, "uuid": "915e8165-f453-4171-a2db-f3fb1110bf25", "comment": "Malware payload", "value": "a73ddd6ec22462db955439f665cad4e6", "object_relation": "md5", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770060499, "uuid": "fc72987e-d125-431c-a035-9d64e5194e3e", "comment": "Malware payload", "value": "b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605", "object_relation": "sha256", "Tag": [ { "name": "", "colour": "#242a7c", "exportable": true, "hide_tag": false }, { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arc", "colour": "#0d6598", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "malware", "colour": "#3a22f0", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false }, { "name": "Mozi.a", "colour": "#ab09a0", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770060499, "uuid": "6dcbb757-fcfe-496f-af42-772263571b8f", "value": "79D312B3C639E3EAF471E4B0B66C23CC101462D9C958BAA0774C54661B5439B1B6F3DB", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770060499, "uuid": "675228b9-5343-4c6d-b135-19f1c29856f3", "value": "3072:2glZ3FtCKXhkmHtZ9TEKzjfj/WMngyIfsJ0F7xPtoM:2IIKXhZtL7jOTyIG87Xl", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770060499, "uuid": "52be427b-429d-47f8-815a-6b5374d3583a", "value": 135472, "object_relation": "size-in-bytes", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "1cb0cbbb-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770062566, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770062566, "uuid": "b0de7152-81d9-4b9e-8683-e896e8c6e699", "comment": "Malware payload", "value": "03642bd8d5d29f20cc46a1070cbf361d", "object_relation": "md5", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770062566, "uuid": "7e385fbe-0c4e-4603-8b65-f3213cebed78", "comment": "Malware payload", "value": "ddd865c21deb075ea6aa498d772c32d684f82c9a7b5ce3cbf17819ccee01683c", "object_relation": "sha256", "Tag": [ { "name": "js", "colour": "#bf35ee", "exportable": true, "hide_tag": false }, { "name": "StrelaStealer", "colour": "#c8921c", "exportable": true, "hide_tag": false }, { "name": "SVG", "colour": "#5ac76c", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770062566, "uuid": "fcda4bf2-1a2d-4ac7-a608-7b5030b427a5", "value": "T1DE310A9C5AA73684E72057F743D97418DE924F5DCC30831E860BD213EB455D84AC8E", "object_relation": "tlsh" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770062566, "uuid": "10ed11a6-1e02-4a91-a097-e204db713978", "value": "24:9HWQ9zTCMmviMbVNJPea22Cdo22z2Fivlw58bRnC59pqxVaShx+66YH+GGxNT6YQ:92mCXXFPOroD20vlP9ni7QZ6YZGxNY", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770062566, "uuid": "ed40f4e5-6b06-45fe-b843-ed0a8de4374f", "value": 1586, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770062566, "uuid": "aa9c15e9-b1b4-4380-8cfd-3d39be438180", "value": "application/zip", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "be0fef6c-007f-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770068407, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770068407, "uuid": "ae36c9a9-d7a9-4227-99b2-65d1e123031e", "comment": "Malware payload", "value": "db52f9b49d119e4d94e754c77494d617", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770068407, "uuid": "947e67dd-4ec2-4ed5-8eba-aed39a37a1c1", "comment": "Malware payload", "value": "9c4fd10864c9599ee8029d5f0541d8cd996b5b1832ed1b4432873285c0d05a8f", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770068407, "uuid": "616494e2-ac45-4dbf-88a5-5ccea5c0a6ea", "value": "T12A05E01AB61D58FDE01AC071825506779A31B4CA0B506AFF81D42A393FAAFF11F3A7", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770068407, "uuid": "e413fc43-954c-4069-ab46-0a4103f7de01", "value": "a76586583a0e36ae93bb6cccae05bb45", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770068407, "uuid": "804eb978-6292-466e-b284-4851e0693770", "value": "12288:T4mjxA4qCmwhFFoBCJp6/X72/mCCjZgMX84hSlduBZIw6Ev:T4m1A9bSoBCJu7XZF844hzEv", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770068407, "uuid": "74c33d1d-0248-49da-8a83-61f2a7c9ac01", "value": 812856, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770068407, "uuid": "fcb76b9d-c6dd-4900-9668-8f082cbe8ff0", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" }, { "name": "file", "meta-category": "file", "description": "File object describing a file with meta-information", "uuid": "aadbbd02-0089-11f1-8b2a-82aee05be84a", "comment": "Malware payload", "timestamp": 1770072670, "Attribute": [ { "type": "md5", "category": "Payload delivery", "to_ids": true, "timestamp": 1770072670, "uuid": "c688ea93-8ae6-48e9-9d7e-7ce4717c708b", "comment": "Malware payload", "value": "981a1be1e199f34e4b606674612e3661", "object_relation": "md5", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "sha256", "category": "Payload delivery", "to_ids": true, "timestamp": 1770072670, "uuid": "f19e701e-ed2a-480d-841f-65d96e2ba6c7", "comment": "Malware payload", "value": "80762f9044b2b9f41ae17ac4f4eb84903f5cd183ee8b89b0b64447264a4955e2", "object_relation": "sha256", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "tlsh", "category": "Payload delivery", "to_ids": false, "timestamp": 1770072670, "uuid": "a21ff6aa-5cab-4dff-a1c8-681add22e361", "value": "T122B6236B86C963D8D4C34B44728B52CE74D0769E84FD491D3ACF1C03AA31DAF564AA", "object_relation": "tlsh" }, { "type": "imphash", "category": "Payload delivery", "to_ids": false, "timestamp": 1770072670, "uuid": "49edf44e-792e-4104-a7b8-493ef907a1e4", "value": "b544070d00013e564a6e7901399d1921", "object_relation": "imphash" }, { "type": "ssdeep", "category": "Payload delivery", "to_ids": false, "timestamp": 1770072670, "uuid": "0ccf159f-edee-4d2d-9833-1d0f26baa054", "value": "196608:5MvFpbDduFjO89fYWKrkNLuKNidPeD4W8eF6t8h2NNBCepVRxcVy5:8pbJuFjnYWZkdPeD4McJnfbR", "object_relation": "ssdeep" }, { "type": "size-in-bytes", "category": "Other", "to_ids": false, "timestamp": 1770072670, "uuid": "6d6a445d-9b56-426a-8f2e-8b2b8ae7f4b1", "value": 11024384, "object_relation": "size-in-bytes", "disable_correlation": true }, { "type": "mime-type", "category": "Payload delivery", "to_ids": false, "timestamp": 1770072670, "uuid": "b8d9d97a-8a84-44c4-a4a8-1a5ca507ec51", "value": "application/x-dosexec", "object_relation": "mimetype", "disable_correlation": true } ], "template_uuid": "688c46fb-5edb-40a3-8273-1af7923e2215", "template_version": "24", "distribution": "5" } ], "Attribute": [ { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990433, "uuid": "323132fc-ffca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://jmr25ks5.xyz:808/linux_mips_softfloat", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990437, "uuid": "3449c156-ffca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://inbibulf.xyz:808/linux_mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990450, "uuid": "3be638b4-ffca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://gmyodoua.xyz:808/linux_mipsel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990552, "uuid": "79207672-ffca-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://iot46kfv.xyz:808/linux_mips64el", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990836, "uuid": "223bde48-ffcb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.252.138:47353/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769990894, "uuid": "44febb30-ffcb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.92.168.119:40437/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991013, "uuid": "8bcea96b-ffcb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.0.170:43363/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769991612, "uuid": "f0e065aa-ffcc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7190222915/9YDSmsh.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993192, "uuid": "9e7e7b94-ffd0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.50.247:58160/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769993477, "uuid": "483c99d3-ffd1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.1.194.124:36120/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994069, "uuid": "a8fd34d9-ffd2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.94.173.9:41327/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994613, "uuid": "ed3bafb2-ffd3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8429623103/0PCyVok.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769994735, "uuid": "35fec82b-ffd4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.42.52:58999/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995091, "uuid": "0a0eefe5-ffd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/huhu/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995091, "uuid": "0a0ef163-ffd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/huhu/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995091, "uuid": "0a0ef27a-ffd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/huhu/titanjr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995091, "uuid": "0a0efcec-ffd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/huhu/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995091, "uuid": "0a0efe76-ffd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/huhu/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995091, "uuid": "0a0f0c76-ffd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.92.241.232/huhu/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995092, "uuid": "0aa5d0ec-ffd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/huhu/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995455, "uuid": "e356be14-ffd5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.181:52094/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995753, "uuid": "9511700a-ffd6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.42.52:58999/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995813, "uuid": "b86c1475-ffd6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.4.192.68:44057/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995814, "uuid": "b911b5c0-ffd6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.88.160:57095/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769995990, "uuid": "224bb400-ffd7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.92.159:53819/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769996772, "uuid": "f44d1a2a-ffd8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.209.87.181:52094/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769997433, "uuid": "7e373457-ffda-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.63.55:39715/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769997614, "uuid": "ea42e144-ffda-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.167.148:36750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769997916, "uuid": "9e4e274d-ffdb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.88.160:57095/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769998150, "uuid": "29de1860-ffdc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.mpsl", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769998393, "uuid": "ba7582ad-ffdc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.65.64:53420/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769998518, "uuid": "04ec67c9-ffdd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.194.251:34239/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769999055, "uuid": "452d9f5a-ffde-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.92.159:53819/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769999167, "uuid": "8792e203-ffde-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.14.147:45300/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769999293, "uuid": "d2b55d68-ffde-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.241.78:39668/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769999609, "uuid": "8f05e9ab-ffdf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.17.81.145:59567/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769999652, "uuid": "a929c0f0-ffdf-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.39.99:39671/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1769999832, "uuid": "13ff5a17-ffe0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.205.1:45235/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770000075, "uuid": "a4c48a81-ffe0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.194.251:34239/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770000209, "uuid": "f4afe88b-ffe0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.41.229:44154/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770000432, "uuid": "799c1ee3-ffe1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.113.200.232:42540/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770000727, "uuid": "299fec08-ffe2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.119.59.138:40788/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770000727, "uuid": "29a3b2a4-ffe2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.11.241.158:57683/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770000909, "uuid": "95f8f7ec-ffe2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.96.164:35706/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001152, "uuid": "26b58222-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.17.81.145:59567/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001214, "uuid": "4beaa571-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.7.223.118:52682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001275, "uuid": "702da400-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.116.39.99:39671/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001275, "uuid": "706d9cf9-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.52.88.145:51871/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001327, "uuid": "8f115979-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.102.84:33093/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001394, "uuid": "b74b7aec-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://218.29.30.32:58241/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001394, "uuid": "b77f3a08-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.53.52.80:58647/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001397, "uuid": "b8f8a645-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.93.237.244:52865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001444, "uuid": "d51ece03-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/relight-73-unsigned/coolray/EEE12", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001451, "uuid": "d96c7b90-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://118.81.178.235:38035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001465, "uuid": "e1c5f7b2-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.19.68.67:57777/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001508, "uuid": "faf15c0c-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.127.205:58202/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001508, "uuid": "faff4aaf-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.214.230.117:39303/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001508, "uuid": "fb71dc52-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.199.185:45882/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001693, "uuid": "698cedd5-ffe4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.204.80.72:40335/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770001934, "uuid": "f8ef98d3-ffe4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.217.41.229:44154/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770002413, "uuid": "16c06f19-ffe6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:44592/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770002896, "uuid": "36574aa9-ffe7-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.31.56:33886/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770003246, "uuid": "0743affe-ffe8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.14.96.164:35706/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770003386, "uuid": "5aa24bf8-ffe8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.179.238.100:25252/.i", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770004090, "uuid": "fe2f0bde-ffe9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.40.215:44592/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770004213, "uuid": "472e0844-ffea-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.224.147:51571/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770004815, "uuid": "ae23c3b5-ffeb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.5.31.56:33886/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770005414, "uuid": "13167f70-ffed-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.82.79:37158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770005534, "uuid": "5aa1f837-ffed-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.224.147:51571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770005535, "uuid": "5b26c980-ffed-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.168.91:46151/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770005900, "uuid": "34cdf204-ffee-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.22.177.204:44904/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770005953, "uuid": "54b1c3e0-ffee-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.113.181:48850/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770006013, "uuid": "789f63b8-ffee-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.160.171.243:40741/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770006076, "uuid": "9da2c881-ffee-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.101.236:55365/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770006245, "uuid": "02cb1d85-ffef-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.50.238:55784/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770006432, "uuid": "721138da-ffef-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.205.58:50516/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770007092, "uuid": "fbc66b23-fff0-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.123.69:48813/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770007336, "uuid": "8ce33152-fff1-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.186.205.58:50516/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770007569, "uuid": "17897604-fff2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.203.144:40033/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770007635, "uuid": "3ef560e5-fff2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.28.254:40007/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770007813, "uuid": "a9363678-fff2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.113.181:48850/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770007887, "uuid": "d5515e80-fff2-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.14.232:41284/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770008473, "uuid": "32c95382-fff4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://78.29.50.238:55784/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770008534, "uuid": "56c10cea-fff4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.120.207:55400/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770008593, "uuid": "7a6600c5-fff4-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.179.237.255:44014/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770008827, "uuid": "05872219-fff5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7326438334/3ysJloC.exe", "Tag": [ { "name": "BlankGrabber", "colour": "#f1c814", "exportable": true, "hide_tag": false }, { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770009186, "uuid": "dbba60a2-fff5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.203.144:40033/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770009186, "uuid": "dbc800c8-fff5-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.122.204:52158/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770009309, "uuid": "24b42a1a-fff6-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.36.70.112:49532/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770010155, "uuid": "1ce38c6d-fff8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.62.1:39257/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770010331, "uuid": "8658c08b-fff8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.62.1:39257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770010450, "uuid": "cd33167d-fff8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.120.115:41117/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770010517, "uuid": "f4e6efbc-fff8-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.124.120.207:55400/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770010579, "uuid": "19e8bb4d-fff9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.230.10:60283/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770010752, "uuid": "814a20c5-fff9-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:46036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011416, "uuid": "0cc5b511-fffb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.50.129:46296/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011657, "uuid": "9c6f2489-fffb-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.130.167:60678/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770011954, "uuid": "4d2ca6f9-fffc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.39.135:60485/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770012009, "uuid": "6e703b28-fffc-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.232.230.10:60283/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770012556, "uuid": "b48a3e25-fffd-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.61.34:46036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770012856, "uuid": "66f8ca1c-fffe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.227.108:52189/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770012856, "uuid": "670d162f-fffe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.30.56:32856/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013105, "uuid": "fb77fb7f-fffe-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.8.118.17:49885/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013400, "uuid": "ab92cec5-ffff-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.225.193.148:53482/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013447, "uuid": "c785bb66-ffff-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sh", "Tag": [ { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013515, "uuid": "efdf66d2-ffff-11f0-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.39.135:60485/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "339a71d4-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/RONcCnV.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "33a76329-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/KFhzOxv.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "33ad5b0a-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/xLlLMYh.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "33ad62d1-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/160064.jpg", "Tag": [ { "name": "jpg-base64-loader", "colour": "#93d451", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "33b0edb0-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/tRDGiHi.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "33b207c8-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/rjG5PhK.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013629, "uuid": "33b208f3-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/qkNAf5t.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013630, "uuid": "34432a35-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/m8mpfXz.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013630, "uuid": "34822cd1-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/47THUwM.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013631, "uuid": "34c64a7d-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/jPRKvvY.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013686, "uuid": "560ffcaa-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://196.251.107.12/public_files/ynmthZg.txt", "Tag": [ { "name": "rev-base64-loader", "colour": "#61a2d7", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770013698, "uuid": "5cce1b74-0000-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.209.161.130/d/xd.arm4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770014061, "uuid": "356024bc-0001-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.227.108:52189/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770014360, "uuid": "e7741813-0001-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.176.119.0:41691/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770014540, "uuid": "5306c1e2-0002-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.64.177:53961/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770014598, "uuid": "75786863-0002-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.30.56:32856/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770014777, "uuid": "e03fd41f-0002-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.8.118.17:49885/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770014779, "uuid": "e1488b56-0002-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.74.94:40357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770015618, "uuid": "d572118c-0004-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.64.177:53961/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770015739, "uuid": "1da9f22a-0005-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.191:42611/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770015861, "uuid": "660e9196-0005-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.156.152.137:34629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770016166, "uuid": "1c1fe717-0006-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:56044/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770016692, "uuid": "55653188-0007-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.246.94:40155/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770016759, "uuid": "7d315ad3-0007-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.16.76.82:48034/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770016821, "uuid": "a278b604-0007-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.198.9:37403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770016902, "uuid": "d2fc9d0b-0007-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.235.237.133:49313/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770017352, "uuid": "df037340-0008-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.3.239:56044/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770017593, "uuid": "6e80b8df-0009-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.39.255.191:42611/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770017774, "uuid": "da2c4953-0009-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.31.133:56130/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770017958, "uuid": "47fc3460-000a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://153.199.144.178:60609/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770018009, "uuid": "66a711eb-000a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.31.228.200:39608/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770018014, "uuid": "697e7e3a-000a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.39:39425/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770018133, "uuid": "b04fcca7-000a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.100.20:48018/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770018196, "uuid": "d5fcb19a-000a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.45.137:45624/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770018208, "uuid": "dd107155-000a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.63.144:37351/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770018258, "uuid": "fae932e6-000a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.65.78:44083/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770018916, "uuid": "82e7659d-000c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.233.105.208:46793/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770019036, "uuid": "ca8d92db-000c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.31.133:56130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770019875, "uuid": "bedf5aba-000e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.91:56357/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770020006, "uuid": "0ca31f1f-000f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.221.169.202:40171/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770020186, "uuid": "780503fd-000f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.208.235.162:60964/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770021080, "uuid": "8ce542be-0011-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.115.91:56357/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770021139, "uuid": "aff35bd6-0011-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.3.6:51818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770021972, "uuid": "a075e806-0013-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.73:60955/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770022161, "uuid": "11686c9c-0014-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://74.214.56.173:40653/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770022517, "uuid": "e5b6f577-0014-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.234.235.39:39425/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770022757, "uuid": "7457f065-0015-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.235:50297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770022875, "uuid": "baae41d6-0015-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:39701/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770022931, "uuid": "dc46e29f-0015-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.112.43.51:49257/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770022932, "uuid": "dcbad514-0015-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.166.210:43760/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770022997, "uuid": "0391251c-0016-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.82.5:41665/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770022998, "uuid": "041d427c-0016-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.173.88:42798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023060, "uuid": "293667a5-0016-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.179.246:42795/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023060, "uuid": "2956d634-0016-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.243.112:53454/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023171, "uuid": "6b76b2b7-0016-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.3.6:51818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023419, "uuid": "ff1c92f9-0016-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.184.252.131:43682/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023536, "uuid": "4513f08e-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/huhu/titanjr.mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023537, "uuid": "455b4192-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023537, "uuid": "4566d6a5-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023537, "uuid": "4569aea7-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023537, "uuid": "456ab870-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023537, "uuid": "456b83e9-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023537, "uuid": "4578a855-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023539, "uuid": "467519c6-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023541, "uuid": "47910a9f-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023542, "uuid": "4872c199-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023660, "uuid": "8e7f51c0-0017-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.167.121:36865/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023887, "uuid": "160cf0f3-0018-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/melihkaya02ka-dotcom/asd/raw/refs/heads/main/foto.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770023887, "uuid": "16617486-0018-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://github.com/usfran/ykp/raw/refs/heads/main/foto.apk", "Tag": [] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770024258, "uuid": "f33f077f-0018-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.85.15:40454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770024258, "uuid": "f363ef6c-0018-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.140.148:52077/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770024375, "uuid": "390bf82a-0019-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.15.192.62:56493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770025390, "uuid": "95f3696e-001b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.3.131.84:52772/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770025393, "uuid": "97812f1c-001b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.116.38.73:60955/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770025461, "uuid": "c0330275-001b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.6.167.121:36865/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770025629, "uuid": "24664c4c-001c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.190.140.148:52077/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770026656, "uuid": "88af5555-001e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:51908/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770026837, "uuid": "f450ac78-001e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.200.92:46924/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770027019, "uuid": "610d202b-001f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.142.242:42080/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770027256, "uuid": "ee76e245-001f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.206.195:59330/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770028030, "uuid": "bb4f1367-0021-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.77.237:46379/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770028088, "uuid": "de35146e-0021-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.11.215:51908/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770028089, "uuid": "def91456-0021-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.37.69:40204/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770028397, "uuid": "96881de9-0022-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.142.200.92:46924/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770028876, "uuid": "b3c83049-0023-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://60.18.50.247:58160/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770030134, "uuid": "a19cf5dc-0026-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.37.69:40204/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770030678, "uuid": "e5bb641a-0027-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.71.20:54506/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770032180, "uuid": "65111fa0-002b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.126.126:33941/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770032180, "uuid": "65279ad1-002b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.86.25:36256/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770032425, "uuid": "f6e18948-002b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.71.20:54506/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770032585, "uuid": "56c5e88c-002c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/www1day7/msdn/fase32", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770032836, "uuid": "ebf89db9-002c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.157.179.246:42795/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770033202, "uuid": "c67882ec-002d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.240.226:57818/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770033308, "uuid": "05b0a9c4-002e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7362035837/qpqWtnc.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770033741, "uuid": "0796858d-002f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.86.171.151:34324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770033742, "uuid": "07ee1f98-002f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.197.192:41153/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770033801, "uuid": "2b426cf2-002f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.126.126:33941/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770034461, "uuid": "b474e9c4-0030-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.181.201/Pandoras_Box/pandora.arm", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770034763, "uuid": "687f968d-0031-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.38.210.180:48130/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770034930, "uuid": "cc24f3bc-0031-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.224.86.25:36256/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770035299, "uuid": "a80852d3-0032-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.63.14.109:49812/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770035538, "uuid": "36b90cd6-0033-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.240.226:57818/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770035587, "uuid": "53a45475-0033-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/sm/random.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770036035, "uuid": "5ec2ac4f-0034-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.212.61.246:44379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770036441, "uuid": "509857f4-0035-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.106.148:42287/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770037096, "uuid": "d76ebdf6-0036-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.11.226:55681/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770037519, "uuid": "d359b1b7-0037-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://221.214.145.224:43203/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770037883, "uuid": "ac5a6bed-0038-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.91.67:53297/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038183, "uuid": "5f32a12d-0039-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.187.160:48273/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038410, "uuid": "e64b8bf1-0039-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7720249373/Pfh7XQi.exe", "Tag": [ { "name": "c2-monitor-auto", "colour": "#46920d", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "Vidar", "colour": "#77efaa", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038469, "uuid": "09c68528-003a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/748049926/6RMytzd.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "GoProxy", "colour": "#48c16b", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038539, "uuid": "336eb2e8-003a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.11.226:55681/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038600, "uuid": "57bd9383-003a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.129.97.37:52471/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038720, "uuid": "9f1ae94d-003a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.56.148:55383/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038730, "uuid": "a57dc5d1-003a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.188.116.32:53140/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770038958, "uuid": "2cea5a13-003b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.54.91.67:53297/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770039969, "uuid": "87e54441-003d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.180.72:58751/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770040097, "uuid": "d3e1e311-003d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.31.228:45061/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770040329, "uuid": "5e8faa74-003e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.55.56.148:55383/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770040625, "uuid": "0e970a8f-003f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pjf61vhjf1q49wkxpx8xcjjnswpx0il4ne876vsfzoefyyw.pages.dev/f766dkmSlcN6k10D9usVKwHUiQk2luOAT1wapFpVEpkPadbRyxZtP0aYkSw465iC6Sm.aspx", "Tag": [ { "name": "DigitStealer", "colour": "#782904", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770040626, "uuid": "0f1192e8-003f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pjf61vhjf1q49wkxpx8xcjjnswpx0il4ne876vsfzoefyyw.pages.dev/AtQKnWvZdtF4cnQVkCt85c11CQlXQQ5sDJeot9j0Wo7WVzkj0fq0XDa0d4rmCuYh1GKX.aspx", "Tag": [ { "name": "DigitStealer", "colour": "#782904", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770040626, "uuid": "0f132c88-003f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://pjf61vhjf1q49wkxpx8xcjjnswpx0il4ne876vsfzoefyyw.pages.dev/IWmYEAWtKLoC8naZASgZOKvXkfxklXI6ZPotespqcceEyTFZ6WJY9Hy5xEQGE4O8dBVtG0bu75FEN.aspx", "Tag": [ { "name": "DigitStealer", "colour": "#782904", "exportable": true, "hide_tag": false }, { "name": "macOS", "colour": "#65b188", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770040999, "uuid": "ed6d541e-003f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.27:55026/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770041710, "uuid": "9587a943-0041-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.180.72:58751/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770041897, "uuid": "04a7b00b-0042-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.46.199.27:55026/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770041897, "uuid": "050c6043-0042-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://58.255.47.236:34390/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770041950, "uuid": "24a1b985-0042-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.71.124:48810/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770042191, "uuid": "b40183d4-0042-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.4.118.108:40270/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770042547, "uuid": "88798805-0043-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.70.236.30:58459/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770043030, "uuid": "a853bd1a-0044-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.71.124:48810/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770043398, "uuid": "8371ea5a-0045-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.233.163:39744/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770043521, "uuid": "ccf1a061-0045-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.189.143.81:55596/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044048, "uuid": "06c5f245-0047-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.39.62:43036/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044112, "uuid": "2d68b89e-0047-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.198:34486/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044113, "uuid": "2dfe60b5-0047-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.49.236:33460/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044231, "uuid": "73c6ac3c-0047-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.93.136.157:53155/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044294, "uuid": "99d51983-0047-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.216.67.155:44579/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044295, "uuid": "99fa8eda-0047-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://178.70.236.30:58459/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044356, "uuid": "be708640-0047-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.230.147:44334/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044480, "uuid": "08aad7f1-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.228.233.163:39744/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044481, "uuid": "0908f276-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.146.35:45798/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044481, "uuid": "092c9503-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.127.29.158:42184/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044481, "uuid": "093698ee-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.146.35:45798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044532, "uuid": "275cf2f7-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.165.2/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044532, "uuid": "27a246ab-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.141.81.80:45585/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044532, "uuid": "27b7f38f-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://185.234.173.235:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044533, "uuid": "28495c3d-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.58.39.62:43036/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044533, "uuid": "2856ea7f-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.181.4.221:8080/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044534, "uuid": "28c98f19-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://91.80.133.251/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044534, "uuid": "28d505e5-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://83.224.172.233/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044535, "uuid": "295b2b4a-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.12.6:8083/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044535, "uuid": "297b9411-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://41.146.12.6:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044536, "uuid": "29a4c96b-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.178.97.182:63173/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044536, "uuid": "29abc1f6-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://181.162.177.136:14157/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044536, "uuid": "29d9cd41-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.242.236.138:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044536, "uuid": "29e98a3f-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://101.168.6.191:85/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044536, "uuid": "29eade77-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://171.235.217.196/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044536, "uuid": "2a139d31-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.103.204.143:34759/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044538, "uuid": "2af3fad3-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://103.76.189.98:31446/i", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044538, "uuid": "2b084512-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://59.88.45.96:2000/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044544, "uuid": "2ec947bf-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.22.75.240:8081/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044544, "uuid": "2ee4bb05-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://14.245.204.80/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044547, "uuid": "3073f230-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://113.238.232.176:33041/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044547, "uuid": "3094844d-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.164.196.147:38327/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044553, "uuid": "33d82949-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.22.75.240:8082/sshd", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044586, "uuid": "47e0c098-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://16.171.38.168/02.08.2022.exe", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044595, "uuid": "4cf21a24-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.45.67.251:39487/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044596, "uuid": "4d794efb-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.89.129:44639/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044664, "uuid": "75ed8b5d-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.139.72.108:45682/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770044838, "uuid": "de1ad8ae-0048-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.49.236:33460/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770045130, "uuid": "8bfeed75-0049-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.50.105.222:37579/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770045488, "uuid": "611d5569-004a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/7782139129/4utgF9B.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770046209, "uuid": "0f54a944-004c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.43.230.147:44334/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770046269, "uuid": "32c9d3f1-004c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.66.198:34486/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770046390, "uuid": "7ad8f5c6-004c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.11:39925/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770046510, "uuid": "c23718e5-004c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.227.187.160:48273/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770046810, "uuid": "755dc3e4-004d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.70:56547/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770047648, "uuid": "68e8f83a-004f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.123.69:48813/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770048198, "uuid": "b05810f6-0050-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.243.112:53454/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770048555, "uuid": "85426465-0051-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.82.70:56547/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770049093, "uuid": "c5f71ddb-0052-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.123.141.34:57797/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770049449, "uuid": "9a21f591-0053-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.76.11:39925/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770050901, "uuid": "fb9c03e7-0056-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.20.211:50493/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770051257, "uuid": "cff65a02-0057-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.146.239:49752/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770051371, "uuid": "13966b4d-0058-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8428202012/oW0Sus9.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false }, { "name": "Smoke Loader", "colour": "#e04b0e", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770051554, "uuid": "80e3cb47-0058-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.56.146.239:49752/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770051919, "uuid": "5a629ff8-0059-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.193.16:43630/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770052388, "uuid": "71bbc077-005a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.81.201:39098/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770052466, "uuid": "a08612d3-005a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://164.68.97.90:60149/linux", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770052466, "uuid": "a0965cb5-005a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.152.7.218:60136/linux", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770052466, "uuid": "a0aa6b80-005a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://8.222.207.98:60149/linux", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770052467, "uuid": "a1404c7d-005a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://87.120.113.238/bins/bins.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770052506, "uuid": "b88dfbd2-005a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://natalstatus.org/ep9TS2/ndt.sh", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770053229, "uuid": "6780edff-005c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.81.20.211:50493/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770053589, "uuid": "3dd3aad3-005d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.193.16:43630/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770053775, "uuid": "accea3a1-005d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.129.130.167:60678/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054012, "uuid": "3a057c20-005e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.73.95:59422/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054073, "uuid": "5e67ca2f-005e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.203.63:46181/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054794, "uuid": "0c3101e8-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.181.201/Pandoras_Box/pandora.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054794, "uuid": "0c3102d2-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.181.201/Pandoras_Box/pandora.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054806, "uuid": "13735dfe-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.181.201/Pandoras_Box/pandora.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770054857, "uuid": "319133ce-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://82.165.181.201/Pandoras_Box/pandora.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055150, "uuid": "e01410ad-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://hopeful-bohr.82-165-181-201.plesk.page/Pandoras_Box/pandora.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055164, "uuid": "e8692dae-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055164, "uuid": "e880b827-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.api.nishant-labs.com/Pandoras_Box/pandora.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055164, "uuid": "e895d6da-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.nishant-labs.com/Pandoras_Box/pandora.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055164, "uuid": "e8e8a2b2-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://busy-kalam.82-165-181-201.plesk.page/Pandoras_Box/pandora.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055169, "uuid": "ebd86d57-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://my-expense.nishant-labs.com/Pandoras_Box/pandora.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055170, "uuid": "ec71f9b9-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://hopeful-bohr.82-165-181-201.plesk.page/Pandoras_Box/pandora.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055170, "uuid": "ec7b7b85-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.x86_32", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ec946906-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.api.nishant-labs.com/Pandoras_Box/pandora.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "eca7c939-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip82-165-181-201.pbiaas.com/Pandoras_Box/pandora.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ecaf5a3f-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ecbed8bb-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.nishant-labs.com/Pandoras_Box/pandora.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ecc326c8-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.i486", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ecd27b1c-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://my-expense.nishant-labs.com/Pandoras_Box/pandora.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ecdab9af-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.nishant-labs.com/Pandoras_Box/pandora.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ece18856-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.i686", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ece188f1-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://my-expense.nishant-labs.com/Pandoras_Box/pandora.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ece5253c-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip82-165-181-201.pbiaas.com/Pandoras_Box/pandora.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ece91753-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip82-165-181-201.pbiaas.com/Pandoras_Box/pandora.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ece9776d-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.arc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ecf54a79-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.api.nishant-labs.com/Pandoras_Box/pandora.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ed095454-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ed0c9fed-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://hopeful-bohr.82-165-181-201.plesk.page/Pandoras_Box/pandora.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ed111836-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.nishant-labs.com/Pandoras_Box/pandora.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055171, "uuid": "ed117e92-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed2265b3-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed22a982-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://hopeful-bohr.82-165-181-201.plesk.page/Pandoras_Box/pandora.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed254b54-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed291d59-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://busy-kalam.82-165-181-201.plesk.page/Pandoras_Box/pandora.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed29b9ea-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed2e7bd3-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip82-165-181-201.pbiaas.com/Pandoras_Box/pandora.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed2f141f-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://ip82-165-181-201.pbiaas.com/Pandoras_Box/pandora.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed3012fc-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://hopeful-bohr.82-165-181-201.plesk.page/Pandoras_Box/pandora.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed309d30-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://busy-kalam.82-165-181-201.plesk.page/Pandoras_Box/pandora.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed38b390-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.api.nishant-labs.com/Pandoras_Box/pandora.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed43d9d7-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://my-expense.nishant-labs.com/Pandoras_Box/pandora.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed484492-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/huhu/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed54aeb3-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/huhu/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055172, "uuid": "ed590b78-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.ppc440", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055174, "uuid": "ee90694b-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://busy-kalam.82-165-181-201.plesk.page/Pandoras_Box/pandora.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055175, "uuid": "ef450978-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://www.api.nishant-labs.com/Pandoras_Box/pandora.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055177, "uuid": "f0a8ed4a-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://busy-kalam.82-165-181-201.plesk.page/Pandoras_Box/pandora.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055181, "uuid": "f3064373-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.mipsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055182, "uuid": "f3432144-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055183, "uuid": "f40e9cc7-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://my-expense.nishant-labs.com/Pandoras_Box/pandora.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055189, "uuid": "f77c7867-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055190, "uuid": "f856d340-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://api.nishant-labs.com/Pandoras_Box/pandora.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055190, "uuid": "f858ee67-0060-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/titanjr.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055223, "uuid": "0b8ea4d7-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://77.90.185.212/all.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055326, "uuid": "48fdb0d1-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6832239903/5thLygr.exe", "Tag": [ { "name": "AsyncRAT", "colour": "#6a2351", "exportable": true, "hide_tag": false }, { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055344, "uuid": "53cc85d3-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.63.250:57909/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055344, "uuid": "5419ecad-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.195.191:58971/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055345, "uuid": "54567d62-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.17.134:50657/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055462, "uuid": "9a7c4cfd-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.235.73.95:59422/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055522, "uuid": "bdebf5a9-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/yarn", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055522, "uuid": "bdf5d144-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/realtek", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055524, "uuid": "bf6499aa-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/thinkphp", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055524, "uuid": "bf7c06aa-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/pulse", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055524, "uuid": "bf7c0844-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/zyxel", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055524, "uuid": "bf7f18be-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/goahead", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055525, "uuid": "bf90678d-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/gpon443", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055525, "uuid": "bf9192c4-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/lg", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055525, "uuid": "bf93402e-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/aws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055525, "uuid": "bf9357d3-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/jaws", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055583, "uuid": "e22925cc-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/hnap", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055585, "uuid": "e37ee469-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/huawei", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055585, "uuid": "e3936afb-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/76d32be0.sh", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055585, "uuid": "e394666f-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://216.126.225.121/zte", "Tag": [ { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055586, "uuid": "e3fc6d06-0061-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://117.198.17.134:50657/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055635, "uuid": "01534f7a-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055635, "uuid": "01665333-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm5", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055635, "uuid": "01736057-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055636, "uuid": "01af0130-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055636, "uuid": "01dab062-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.i686", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055636, "uuid": "01e29fdf-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055636, "uuid": "01e6f0fc-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055636, "uuid": "01e6f281-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055636, "uuid": "01eb9b98-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/596a96cc7bf9108cd896f33c44aedc8a/db0fa4b8db0333367e9bda3ab68b8042.arm7", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055687, "uuid": "20a554cf-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/hnap", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055689, "uuid": "21682194-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/huawei", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "225be58f-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/aws", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "225be62e-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/goahead", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "225beba9-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/zte", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "22618848-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/jaws", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "2261a848-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/realtek", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055690, "uuid": "22641431-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/gpon443", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055691, "uuid": "2286c50d-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/76d32be0.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055691, "uuid": "22f2c1b9-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/zyxel", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055694, "uuid": "244f18b9-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/lg", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055701, "uuid": "288a1432-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/yarn", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055701, "uuid": "2891c1cc-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/pulse", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770055707, "uuid": "2c1144d8-0062-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://stopdicksucking.duckdns.org/thinkphp", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056174, "uuid": "42a688a5-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056174, "uuid": "42a689ad-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056174, "uuid": "42ad91c6-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056174, "uuid": "42d7e0fb-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056181, "uuid": "4710602a-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056181, "uuid": "47106894-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056181, "uuid": "4710f84e-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056181, "uuid": "47153982-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.x86_64", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056181, "uuid": "471745fc-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056181, "uuid": "471b08ea-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056182, "uuid": "4720be48-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056182, "uuid": "4720d0d5-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.148.190/bins/boota.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "d2ecd115-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "d2f0fa3b-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "d2f28fd7-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "d2f2d766-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "d2f569ad-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "d2f6eae8-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "d2f97b7e-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056416, "uuid": "d2fd7d31-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056474, "uuid": "f54503a5-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056474, "uuid": "f5454594-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/w", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056474, "uuid": "f547f05e-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.214.199:43586/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056474, "uuid": "f548cb12-0063-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/sdxkzX_UNXPOE282.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056534, "uuid": "191bf9a5-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.250.17.29:46359/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056539, "uuid": "1c66d106-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://107.172.230.231/byte", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056660, "uuid": "640b2974-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.mpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056660, "uuid": "641460ed-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.arm7", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056660, "uuid": "64146a15-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.ppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056660, "uuid": "64385b5c-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.arm", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056660, "uuid": "6439194a-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.mips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056726, "uuid": "8b7a9e54-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.arm6", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056726, "uuid": "8b808fe9-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.x86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056726, "uuid": "8b84d0a3-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.spc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056726, "uuid": "8beb9c04-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.sh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056726, "uuid": "8bf00654-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.m68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056778, "uuid": "aa7dd74c-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://193.56.135.247/bins/sdxkzX_UNXPOE282.arm5", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056835, "uuid": "cce71a5d-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.x32", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056835, "uuid": "ccea3f9f-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.m68k", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056840, "uuid": "cf6cda97-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://85.15.107.19:59541/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056841, "uuid": "d001fb43-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.ppc", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056841, "uuid": "d00fa7d9-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.mpsl", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056842, "uuid": "d0af18a1-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.x86", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056842, "uuid": "d0af1ba3-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.mips", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056842, "uuid": "d0b63c5f-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.i586", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056844, "uuid": "d1f69553-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.arm4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056896, "uuid": "f0e1d3f7-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/bins.sh", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056896, "uuid": "f0f94549-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.sh4", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770056901, "uuid": "f441dc70-0064-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://vigorous-tu.216-10-244-155.plesk.page/yakuza.arm6", "Tag": [ { "name": "botnetdomain", "colour": "#d2f2bd", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "gafgyt", "colour": "#6015f8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057137, "uuid": "8068bfab-0065-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.28.135:34629/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057203, "uuid": "a7c1cfba-0065-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.201.167:48571/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057249, "uuid": "c3713497-0065-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://79.110.49.81/cyber.exe", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057256, "uuid": "c7b02309-0065-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://marcialong.alwaysdata.net/WindowUpdate.msi", "Tag": [ { "name": "connectwise", "colour": "#4e114e", "exportable": true, "hide_tag": false }, { "name": "screenconnect", "colour": "#db9821", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057378, "uuid": "109372d7-0066-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.6.187.243:60638/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057622, "uuid": "a1cb4783-0066-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.112.121:59528/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057865, "uuid": "32ae97a4-0067-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://162.250.17.29:46359/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770057866, "uuid": "333d5268-0067-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.13.36.157:37750/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770058395, "uuid": "6e6eef5f-0068-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.52.28.135:34629/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770058762, "uuid": "4915a2cc-0069-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.61.112.121:59528/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770059057, "uuid": "f9358a1c-0069-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.145.252:56097/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770059540, "uuid": "18fea25d-006b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.222.179:34556/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770060211, "uuid": "a9189de9-006c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.165.123.67:36362/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770060499, "uuid": "54d4fd2d-006d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://39.90.145.252:56097/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770060862, "uuid": "2ce3631e-006e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.143.190:35845/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770060975, "uuid": "7042c5b3-006e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.122.34:59913/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770061037, "uuid": "95690619-006e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.53.123.42:57039/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770061268, "uuid": "1f30aa34-006f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.62.144.139:40781/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770061387, "uuid": "65fa1e5a-006f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.73:54484/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770061387, "uuid": "661a5105-006f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.7.222.179:34556/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770061458, "uuid": "9030f6c8-006f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.25:34035/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770061512, "uuid": "b024bb5e-006f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.26.25:34035/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770061512, "uuid": "b05d091b-006f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.55.229.0:41324/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770062242, "uuid": "637553ee-0071-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.48.148.140:50582/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770062297, "uuid": "845867aa-0071-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.176.195.191:58971/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770062434, "uuid": "d5cc9711-0071-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.224.2:41255/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770062534, "uuid": "116e606b-0072-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.126.143.190:35845/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770062836, "uuid": "c587624a-0072-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.103.207:44767/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770063079, "uuid": "565aa4a0-0073-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://123.12.198.34:49225/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770063130, "uuid": "749e65a6-0073-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.49.235.143:60062/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770063492, "uuid": "4cc6cf3d-0074-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.11.114:50214/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770063613, "uuid": "94936778-0074-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.52.73:54484/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770063613, "uuid": "94c291a5-0074-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://120.60.224.2:41255/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770063728, "uuid": "d9721af5-0074-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.155.201.124:36311/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770063814, "uuid": "0c5fce8e-0075-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.195:54707/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770064150, "uuid": "d4a5c8e1-0075-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.221.7:46253/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770064638, "uuid": "f77fa19b-0076-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.35.199:39701/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770064875, "uuid": "8518780f-0077-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.209.153.230:46466/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770065057, "uuid": "f156cf46-0077-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://202.107.11.114:50214/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770065290, "uuid": "7c6ede68-0078-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.239.101.195:54707/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770065600, "uuid": "353f4f87-0079-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.58.226.27:54763/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066067, "uuid": "4b86df7e-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://88.247.113.210:53594/Mozi.m", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066069, "uuid": "4c4ff441-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.51.4.183:46807/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066069, "uuid": "4c57141b-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.9.24:45835/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066069, "uuid": "4c571e8a-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.229.223.87:43788/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066069, "uuid": "4c5a6fcf-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.9.24:45835/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066069, "uuid": "4c6f65d2-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.226.218.20:40280/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066078, "uuid": "51c69b14-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.96.43:45517/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066134, "uuid": "731ee5e2-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.98.124:47413/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066134, "uuid": "73282705-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.41.4.117:54926/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066135, "uuid": "73cfe465-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.5.55:38907/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066135, "uuid": "740d2103-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.207.246.137:52440/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066135, "uuid": "74154584-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://175.175.82.213:52419/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066187, "uuid": "9290b5b0-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/pspc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066187, "uuid": "92a8966f-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/pppc", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066187, "uuid": "92b22557-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/psh4", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066187, "uuid": "93265f66-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/pmpsl", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066188, "uuid": "9336da89-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/parm", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066188, "uuid": "935b9e39-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/parm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066188, "uuid": "93641427-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/px86", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066188, "uuid": "9395ff2e-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/parm7", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066188, "uuid": "93b0f66c-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/pm68k", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066188, "uuid": "93b57a75-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/parm6", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066189, "uuid": "940ea92e-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://45.92.1.28/bins/pmips", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066317, "uuid": "e0204ec3-007a-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.53.94:33262/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066486, "uuid": "4544536b-007b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://176.65.139.21/file/bbc", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066737, "uuid": "dabd1775-007b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.209.153.230:46466/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770066976, "uuid": "695c7b56-007c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.47.9:43573/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770067095, "uuid": "b042f539-007c-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.194.186:35111/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770067460, "uuid": "899b42cb-007d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.130.55:55983/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770067574, "uuid": "cd7ac32e-007d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://219.154.173.88:42798/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770067819, "uuid": "5fdf4c80-007e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.215.53.94:33262/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770067938, "uuid": "a67494b5-007e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://115.57.194.186:35111/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770067990, "uuid": "c5b69353-007e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://222.137.77.237:46379/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770068407, "uuid": "be1f4d9e-007f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/8020066796/e9Uflu1.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770068657, "uuid": "5341e1b7-0080-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.59.9:42804/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770068898, "uuid": "e27996e5-0080-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.152.219:60445/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770069315, "uuid": "db0ea27e-0081-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://124.131.130.55:55983/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770069921, "uuid": "44c6cacd-0083-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.34.129:37403/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770070218, "uuid": "f59297f6-0083-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://61.52.59.9:42804/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770070336, "uuid": "3be4850b-0084-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.239.152.219:60445/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770070661, "uuid": "fdcecdbe-0084-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://27.37.75.167:46073/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770071249, "uuid": "5c3a3ba9-0086-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.127.252:59733/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770071826, "uuid": "b4320bc8-0087-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://42.230.34.129:37403/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770072670, "uuid": "aae5fff3-0089-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.43/files/6919303532/FeWieZb.exe", "Tag": [ { "name": "dropped-by-amadey", "colour": "#1ac4f9", "exportable": true, "hide_tag": false }, { "name": "fbf543", "colour": "#7bb82f", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770073532, "uuid": "acb9e015-008b-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.117.127.252:59733/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770074164, "uuid": "25c2a85d-008d-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "https://cdn.jsdelivr.net/gh/relight-73-unsigned/coolray/mm21", "Tag": [ { "name": "ClearFake", "colour": "#c772c8", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770074898, "uuid": "dab9b454-008e-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.159.31:47694/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770075377, "uuid": "f87aaa32-008f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://112.237.187.97:45980/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770075384, "uuid": "fcb3f160-008f-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://119.189.162.133:60311/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770075671, "uuid": "a7c29fd3-0090-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://125.40.153.144:48832/bin.sh", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770075809, "uuid": "fa13a9d4-0090-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://110.37.18.205:58229/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076447, "uuid": "76561639-0092-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://130.12.180.20:34029//arm5", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "url", "category": "Payload delivery", "to_ids": true, "timestamp": 1770076643, "uuid": "eade0cda-0092-11f1-8b2a-82aee05be84a", "comment": "Malware distribution site", "value": "http://182.121.159.31:47694/i", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22ea8f72-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "101.168.6.191", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22e96188-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "103.76.189.98", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769998144, "uuid": "26368263-ffdc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "107.172.230.231", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "ascii", "colour": "#88b2db", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770009306, "uuid": "2338e4dd-fff6-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.36.70.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770001324, "uuid": "8dc11928-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.102.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770062823, "uuid": "bda610b5-0072-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.103.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770060965, "uuid": "6a1af767-006e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.122.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770061445, "uuid": "881d4e28-006f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.26.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770030664, "uuid": "dda9f8c8-0027-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.71.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770046384, "uuid": "7768034a-004c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.76.11", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044584, "uuid": "46961fdf-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.37.89.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769998505, "uuid": "fd5d6e40-ffdc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.194.251", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770034744, "uuid": "5d77cbaa-0031-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "110.38.210.180", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770063784, "uuid": "fac31542-0074-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.239.101.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044225, "uuid": "708d7cc0-0047-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "112.93.136.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22f3bc60-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "113.238.232.176", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22e910c5-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.178.97.182", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054064, "uuid": "58bc2314-005e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.203.63", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770004205, "uuid": "42e6d7c6-ffea-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.224.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770063123, "uuid": "70d5de1e-0073-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.235.143", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770018244, "uuid": "f2cd212b-000a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.49.65.78", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770045125, "uuid": "88beb0ce-0049-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.105.222", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769995805, "uuid": "b423b44c-ffd6-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.88.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769995984, "uuid": "1ed18540-ffd7-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.50.92.159", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770066065, "uuid": "4a05fce0-007a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.51.4.183", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770016684, "uuid": "5107624a-0007-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.246.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057125, "uuid": "79414a7d-0065-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.52.28.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023044, "uuid": "1f8dc579-0016-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.243.112", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044107, "uuid": "29eaa0a3-0047-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.55.49.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770051245, "uuid": "c897c578-0057-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.56.146.239", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770067084, "uuid": "a9664f40-007c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.194.186", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055324, "uuid": "481fc6cc-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.57.63.250", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044045, "uuid": "05037e00-0047-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.39.62", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770024245, "uuid": "eb465c81-0018-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.58.85.15", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770005943, "uuid": "4ed5a9e1-ffee-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.61.113.181", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770061264, "uuid": "1cb324c2-006f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.144.139", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770039965, "uuid": "8528ab05-003d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.62.180.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770028085, "uuid": "dc67c51a-0021-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "115.63.37.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055324, "uuid": "481fcdf0-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.17.134", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770027244, "uuid": "e702a17f-001f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.198.206.195", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770020164, "uuid": "6af2240f-000f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.208.235.162", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770036006, "uuid": "4d675036-0034-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.212.61.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770018184, "uuid": "cef89765-000a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.63.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044285, "uuid": "94042ff0-0047-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.216.67.155", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770000184, "uuid": "e5c3258c-ffe0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.217.41.229", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770019984, "uuid": "0000d132-000f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.221.169.202", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770016866, "uuid": "bd4959ae-0007-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.235.237.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22e8b5a5-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "117.242.236.138", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770021964, "uuid": "9be2587a-0013-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.116.38.73", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770075365, "uuid": "f12bfa14-008f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "119.189.162.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770062406, "uuid": "c4f0b657-0071-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "120.60.224.2", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770063064, "uuid": "4d93e404-0073-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.198.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770033184, "uuid": "bb6e5e15-002d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.12.240.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011648, "uuid": "96cc5ac6-fffb-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.129.130.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057845, "uuid": "265b36d4-0067-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.13.36.157", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770000905, "uuid": "93aadabc-ffe2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.14.96.164", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038707, "uuid": "97b183e6-003a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.188.116.32", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770043506, "uuid": "c429a02e-0045-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.189.143.81", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770024245, "uuid": "eb4639a1-0018-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.190.140.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22e8f857-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.22.75.240", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770002885, "uuid": "2fb8cb4a-ffe7-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.5.31.56", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770001206, "uuid": "470bbe12-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "123.7.223.118", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038585, "uuid": "4eb83a60-003a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "124.129.97.37", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770075664, "uuid": "a3c9152a-0090-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.153.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770021124, "uuid": "a7717969-0011-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.3.6", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770011947, "uuid": "493a3566-fffc-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.40.39.135", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770005524, "uuid": "551ed83e-ffed-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.168.91", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770064144, "uuid": "d12534dc-0075-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.221.7", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770066123, "uuid": "6ca7c367-007a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.4.117", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770066065, "uuid": "4a05d4de-007a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.41.9.24", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770037084, "uuid": "d0483354-0036-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.11.226", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044343, "uuid": "b6a60385-0047-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.43.230.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770040985, "uuid": "e51e4b1b-003f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "125.46.199.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770003365, "uuid": "4dd91c8b-ffe8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.179.238.100", "Tag": [ { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22e91564-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "14.245.204.80", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770017944, "uuid": "3fa82a8f-000a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "153.199.144.178", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044584, "uuid": "46966de1-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "16.171.38.168", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "CobaltStrike", "colour": "#6fc5e4", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770052445, "uuid": "93c6558e-005a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "164.68.97.90", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22e90627-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "171.235.217.196", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22ee90ed-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.164.196.147", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770060184, "uuid": "98d14401-006c-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.123.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770052385, "uuid": "6fefe60b-005a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.81.201", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770046805, "uuid": "722d0ef4-004d-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.165.82.70", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770018005, "uuid": "63f77341-000a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "175.31.228.200", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770066484, "uuid": "43fb9c29-007b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "176.65.139.21", "Tag": [ { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770042544, "uuid": "86bad651-0043-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "178.70.236.30", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22ea028c-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "181.162.177.136", "Tag": [ { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "hajime", "colour": "#9ffdd8", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769999644, "uuid": "a44f918e-ffdf-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.116.39.99", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770071224, "uuid": "4d54faa8-0086-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.127.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770041944, "uuid": "20b44c12-0042-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.117.71.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769994725, "uuid": "2fe6c4cf-ffd4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.121.42.52", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770049084, "uuid": "c0c7550b-0052-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.123.141.34", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770008525, "uuid": "516b0dc3-fff4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.124.120.207", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770060844, "uuid": "226d5fb3-006e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.143.190", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057184, "uuid": "9c9d0783-0065-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.126.201.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770022925, "uuid": "d8698980-0015-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.166.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044465, "uuid": "ffb15859-0047-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "182.127.29.158", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22e88214-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "185.234.173.235", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056644, "uuid": "5afe85b8-0064-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "193.56.135.247", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770063483, "uuid": "4750f18f-0074-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.11.114", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770007625, "uuid": "38ea6c7f-fff2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "202.107.28.254", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023524, "uuid": "3da8a877-0017-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "216.126.225.121", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770022985, "uuid": "fc4ae69a-0015-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.154.173.88", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770051906, "uuid": "52bd8cd0-0059-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.193.16", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770063724, "uuid": "d715407e-0074-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.201.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770007565, "uuid": "157cd23d-fff2-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.155.203.144", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770015844, "uuid": "5c2869e3-0005-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.152.137", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770010144, "uuid": "169f2c8f-fff8-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.156.62.1", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770023044, "uuid": "1f8dc7c8-0016-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "219.157.179.246", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770014765, "uuid": "d8faccae-0002-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.137.74.94", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22ea0f08-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.141.81.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770026825, "uuid": "ed2b1c7f-001e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "222.142.200.92", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770033724, "uuid": "fdb01799-002e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.207.197.192", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770064864, "uuid": "7e72ed19-0077-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.209.153.230", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770007084, "uuid": "f6b89234-fff0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.123.69", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770027005, "uuid": "58b4eafc-001f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.215.142.242", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770070624, "uuid": "e75ead72-0084-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "27.37.75.167", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770050885, "uuid": "f2340af9-0056-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.81.20.211", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770059044, "uuid": "f13d1b76-0069-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "39.90.145.252", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055324, "uuid": "481fd328-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.176.195.191", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770032164, "uuid": "5b5b6604-002b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.224.86.25", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770013385, "uuid": "a27a98ad-ffff-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.225.193.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770066065, "uuid": "4a0618f3-007a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.218.20", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770014525, "uuid": "49d8c23d-0002-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.226.64.177", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038165, "uuid": "547e04fe-0039-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.227.187.160", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770043384, "uuid": "7b710859-0045-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.228.233.163", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770066065, "uuid": "4a060261-007a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.229.223.87", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770001505, "uuid": "f9623f44-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.199.185", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770069905, "uuid": "3b1f0dbc-0083-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.230.34.129", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770010564, "uuid": "11279ba2-fff9-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.232.230.10", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044465, "uuid": "ffb13fbe-0047-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.146.35", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770054005, "uuid": "35c86926-005e-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.235.73.95", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770068884, "uuid": "da47c9ae-0080-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.239.152.219", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770006065, "uuid": "977ecf79-ffee-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.101.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770042185, "uuid": "b0566b5e-0042-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.4.118.108", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770001265, "uuid": "6a8a9af1-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.52.88.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770001384, "uuid": "b15a8d62-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.53.52.80", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770037865, "uuid": "a1be3ad8-0038-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.54.91.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770017764, "uuid": "d4c1a145-0009-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.31.133", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770038707, "uuid": "97b19ddf-003a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.55.56.148", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770065584, "uuid": "2b442ba2-0079-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.58.226.27", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057365, "uuid": "08cb9526-0066-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.6.187.243", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770059524, "uuid": "0fac53c9-006b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "42.7.222.179", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770066184, "uuid": "91298f81-007a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "45.92.1.28", "Tag": [ { "name": "arm", "colour": "#cbbf5a", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "geofenced", "colour": "#1f0be2", "exportable": true, "hide_tag": false }, { "name": "m68k", "colour": "#8b9939", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "mirai", "colour": "#cc650d", "exportable": true, "hide_tag": false }, { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "PowerPC", "colour": "#ff7a12", "exportable": true, "hide_tag": false }, { "name": "sparc", "colour": "#36e61e", "exportable": true, "hide_tag": false }, { "name": "SuperH", "colour": "#25a3d8", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false }, { "name": "USA", "colour": "#c4b637", "exportable": true, "hide_tag": false }, { "name": "x86", "colour": "#0fa3df", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770041885, "uuid": "fd95d662-0041-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "58.255.47.236", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22f2b44e-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.88.45.96", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770001384, "uuid": "b15a925c-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "59.93.237.244", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770016744, "uuid": "74a7c7f6-0007-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.16.76.82", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769999584, "uuid": "80a5feac-ffdf-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.17.81.145", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993165, "uuid": "8e3f383c-ffd0-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.18.50.247", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770001444, "uuid": "d4db1c7e-ffe3-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.19.68.67", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770005884, "uuid": "2bb93ffd-ffee-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "60.22.177.204", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1769993466, "uuid": "419d6c1b-ffd1-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.1.194.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770014345, "uuid": "de9ecec6-0001-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.176.119.0", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770025384, "uuid": "928d6540-001b-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.3.131.84", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770068644, "uuid": "4b5226e2-0080-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.59.9", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "mips", "colour": "#251061", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770066123, "uuid": "6ca7a2e8-007a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "61.52.98.124", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22f0eb22-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "77.181.4.221", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057244, "uuid": "c0a74b5f-0065-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "79.110.49.81", "Tag": [ { "name": "opendir", "colour": "#311efc", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770052445, "uuid": "93c66128-005a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.152.7.218", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770052445, "uuid": "93c63bb2-005a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "8.222.207.98", "Tag": [ { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22e8d082-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.165.2", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22e9d7ff-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "83.224.172.233", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770001684, "uuid": "642f1ae4-ffe4-11f0-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "85.204.80.72", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770052445, "uuid": "93c6b2d7-005a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "87.120.113.238", "Tag": [ { "name": "sh", "colour": "#fcf208", "exportable": true, "hide_tag": false }, { "name": "ua-wget", "colour": "#20da6a", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770066065, "uuid": "4a060d42-007a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "88.247.113.210", "Tag": [ { "name": "32-bit", "colour": "#ea1acb", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "Mozi", "colour": "#dabae0", "exportable": true, "hide_tag": false } ] }, { "type": "ip-dst", "category": "Payload delivery", "to_ids": false, "timestamp": 1770044524, "uuid": "22f0e316-0048-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "91.80.133.251", "Tag": [ { "name": "backdoor", "colour": "#26305c", "exportable": true, "hide_tag": false }, { "name": "censys", "colour": "#97DA5B", "exportable": true, "hide_tag": false }, { "name": "elf", "colour": "#0b6b80", "exportable": true, "hide_tag": false }, { "name": "sshdkit", "colour": "#67ca42", "exportable": true, "hide_tag": false } ] }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055145, "uuid": "dd56c29b-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "api.nishant-labs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055145, "uuid": "dd8ce006-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "busy-kalam.82-165-181-201.plesk.page" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055145, "uuid": "dd65a5ae-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "hopeful-bohr.82-165-181-201.plesk.page" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770057250, "uuid": "c3edfbcc-0065-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "marcialong.alwaysdata.net" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055145, "uuid": "dd596a67-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "my-expense.nishant-labs.com" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770052506, "uuid": "b865b591-005a-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "natalstatus.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770040624, "uuid": "0e2f7688-003f-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "pjf61vhjf1q49wkxpx8xcjjnswpx0il4ne876vsfzoefyyw.pages.dev" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055624, "uuid": "faff84cc-0061-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "stopdicksucking.duckdns.org" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770056824, "uuid": "c633b3fc-0064-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "vigorous-tu.216-10-244-155.plesk.page" }, { "type": "domain", "category": "Payload delivery", "to_ids": false, "timestamp": 1770055145, "uuid": "dd59d397-0060-11f1-8b2a-82aee05be84a", "comment": "Malware payload delivery host", "value": "www.api.nishant-labs.com" } ] } }